Matthias RauterandQt Cherry-pick Bot
e3a1ec29a3
QProcess is a central class to execute external code and communicate with it. The program path is set by the developer and so are the arguments. Path and arguments should not come from untrusted sources, and the executed program must be trusted as well. Nevertheless, a bug in this code might result in an easily exploitable attack vector, e.g. by manipulating the PATH or the search order of executables. Therefore, all related classes are marked security critical. This includes the headers, as they are part of the external execution machinery and define sensitive properties. QUIP: 23 Task-number: QTBUG-135187 Change-Id: I34006b9adbf49ed8997c9eb1446b1f73654d7e51 Reviewed-by: Marc Mutz <marc.mutz@qt.io> (cherry picked from commit 027894b84b2544c1e944b856045e22c3167e721d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 0d5803107b5136fc5454bf2543a04b09bc6fcd14) (cherry picked from commit 8314eadb3eb102d41ebcdfcb077253d4a77771ba)