[Development] A bug or not a bug, that's the question

Kurt Pattyn pattyn.kurt at gmail.com
Thu Sep 5 13:46:19 CEST 2013



> From: Thiago Macieira <thiago.macieira at intel.com>
> Subject: Re: [Development] A bug or not a bug, that's the question
> Date: 26 Aug 2013 17:16:19 GMT+02:00
> To: development at qt-project.org
> On segunda-feira, 26 de agosto de 2013 13:53:38, Kurt Pattyn wrote:
> We should remove the check. It was added because GLib made the mistake of 
> forbidding them, and the mistake was imported into D-Bus, which led to remote 
> DoS attacks in KDE applications that sent remote text via D-Bus (konversation 
> sent the text sent by people from IRC).
> GLib was fixed in version 2.36 and D-Bus was fixed in 1.6.10. Since 1.6.10 is 
> pretty new, we need to keep a version check in QtDBus.
Is it OK then to remove the check in QUtf8Codec, or do we need a check on the DBus version (which is not relevant for other platforms than Linux), and depending on the version include/exclude the check?




More information about the Development mailing list