Qt QTextCodec::codeForName() Out-of-Bounds Read Vulnerability Fix

Vulnerability Overview Vulnerability Name: QtCodec: Avoid read-past-buffer in Vulnerability Description: In , the function contains a potential out-of-bounds buffer read issue. This function accepts a parameter and implicitly calls . The caller expects this parameter to be NULL-terminated; however, if the is created via , this guarantee is not ensured. Impact Scope Affected Versions: All versions using the QtCodec library, particularly those creating instances from . Potential Risk: May lead to out-of-bounds buffer reads, potentially resulting in data leakage or program crashes. Remediation Remediation Measure: In newer Qt versions, has implemented a method. It is necessary to further verify and adopt the use of to ensure NULL termination. Code Changes: - Fixed the out-of-bounds read issue in the function within . - Modified the function to ensure parameters are NULL-terminated. Code Changes Additional Information Submitter: Marc Mutz Reviewers: Giuseppe D'Angelo, Jani Heikkinen, Qt Sanity Bot Status: Merged Date: March 25, 2023 Related Files Comments Giuseppe D'Angelo: Code-Review +1 Marc Mutz: Updated patch set, updated commit message. Log Marc Mutz: Uploaded patch set 1, precheck request with default parameters, buildonly: false, cherrypick: false. Marc Mutz: Uploaded patch set 2, updated commit message, updated votes. Relationships Related Patches: - Enable strict mode 6.11 (Merged) - Enable strict mode 6.9.1 (Merged) - QJniObjectConv.cpp (Merged) - tst_QJniObjectReader.cpp (Merged) - tst_QJniCodec.cpp (Merged) - QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCodec.cpp (Merged) - tst_QJniCo

Goal Reached Thanks to every supporter — we hit 100%!

Qt QTextCodec::codeForName() Out-of-Bounds Read Vulnerability Fix