whytofly
/
qt6-bb10
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
qt6-bb10/src
History
Giuseppe D'Angelo c01eaa4382 QHash security fix (2/2): enable QHash random seed 
Algorithmic complexity attacks against hash tables have been known
since 2003 (cf. [1, 2]), and they have been left unpatched for years
until the 2011 attacks [3] against many libraries /
(reference) implementations of programming languages.

This patch makes qHash use the QHash seed introduced in the
previous commits, thus truly randomizing bucketing in QHash.

[1] http://www.cs.rice.edu/~scrosby/hash/CrosbyWallach_UsenixSec2003.pdf
[2] http://perldoc.perl.org/perlsec.html#Algorithmic-Complexity-Attacks
[3] http://www.ocert.org/advisories/ocert-2011-003.html

Task-number: QTBUG-23529
Change-Id: Ibee9cf6aa820af5d777fcde478647665c728052a
Reviewed-by: Jason McDonald <jason.mcdonald@nokia.com>
 		2012-04-14 17:59:26 +02:00
..
3rdparty Harfbuzz-thai - fix buffer overflow when setting item attributes 2012-04-02 14:52:48 +02:00
concurrent Remove references to QT_NO_STL from QtConcurrent 2012-04-07 05:19:50 +02:00
corelib QHash security fix (2/2): enable QHash random seed 2012-04-14 17:59:26 +02:00
dbus More qHash(T, uint) overloads for Qt types 2012-04-07 22:20:19 +02:00
gui Remove QPaintBufferSignalProxy and QPaintBufferResource. 2012-04-12 17:22:19 +02:00
modules List QtPrintSupport as a dependency of QtPlatformSupport. 2012-03-22 11:36:45 +01:00
network Fix error reporting in QNetworkReplyHttpImplPrivate 2012-04-11 22:20:10 +02:00
opengl Merge master into api_changes 2012-03-23 14:10:58 +01:00
platformsupport Corrected filenames to build on case-sensitive Mac filesystems 2012-04-03 12:45:46 +02:00
plugins Define usagePolicies API in QNetworkSession 2012-04-11 22:19:21 +02:00
printsupport Merge remote-tracking branch 'origin/master' into api_changes 2012-04-10 15:31:45 +02:00
sql Merge remote-tracking branch 'origin/master' into api_changes 2012-04-10 15:31:45 +02:00
testlib Change the component formatting enum values so the default is zero 2012-04-11 23:32:26 +02:00
tools Deprecate qMemCopy/qMemSet in favour of their stdlib equivilents. 2012-04-11 10:46:19 +02:00
widgets QLayoutItem - make controlTypes a virtual function. 2012-04-13 10:17:44 +02:00
winmain replace uses of QMAKE_INCDIR_QT and QMAKE_LIBDIR_QT with module-specific variables 2012-03-08 18:57:56 +01:00
xml Merge master into api_changes 2012-03-23 14:10:58 +01:00
qbase.pri
…
qt_install.pri
…
qt_targets.pri
…
src.pro Add Qt Widgets opt out support to build system 2012-03-15 11:40:50 +01:00