Skip to content

Windows: use QSystemLibrary instead of LoadLibrary directly

Albert Astals Cid requested to merge aacid/qtbase:windows_cve into kde/5.15

Using QSystemLibrary ensures that it will only use the expected copy of the system library and not one that has been placed in the application's working directory or elsewhere in the PATH environment variable.

Pick-to: 5.15 6.2 6.3

Change-Id: Ic4234334f73482b38ee5f06345bf11f8c029edc5

Reviewed-by: Laszlo Agocs laszlo.agocs@qt.io

Reviewed-by: Thiago Macieira thiago.macieira@intel.com

Reviewed-by: Qt CI Bot qt_ci_bot@qt-project.org

(cherry picked from commit a14f2d59)

Contents are actually from https://download.qt.io/official_releases/qt/5.15/CVE-2022-25643-5.15.diff and not from the cherry-pick

Edited by Albert Astals Cid

Merge request reports