Qt-Security-QDataStreamOperatorRead

Check read operator (>>) for QDataStream

Required inputs: IR

The QDataStream::operator>>() operator reads data from a QDataStream. This operator should be used with caution, as it may not properly sanitize the input data. When using this operator for reading data from untrusted sources, e.g., from a network connection or a file, this operator may allow attackers to execute arbitrary code on the system. Hence, this operator should only be used if absolutely sure that the input data is trustworthy and safe.

Possible Messages

Key	Text	Severity	Disabled
suspicious_read	Found suspicious call to operator>> of QDataStream.	None	False

Options

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

• This rule has no individual options.