[Interest] Is it safe to use QDataStream to parse data from untrusted source?

[Alexander Dyagilev]

Thank you for the response!

Is it also true for Qt 5.12? I mean, was CBOR parser of it tested by the 
Google Fuzzer project?


On 5/12/2022 7:27 PM, Thiago Macieira wrote:
> On Thursday, 12 May 2022 08:30:16 PDT Alexander Dyagilev wrote:
>> Is it safe to use QDataStream? E.g. can it crash / stack overflow / etc.
>> on malformed data?
> It's not safe.
>
> The XML, CBOR, and JSON parsers can parse untrusted data and are tested by the
> Google Fuzzer project to ensure we keep them that way.
>