• Nikias Bassen's avatar
    bplist: Fix data range check for string/data/dict/array nodes · 32ee5213
    Nikias Bassen authored
    Passing a size of 0xFFFFFFFFFFFFFFFF to parse_string_node() might result
    in a memcpy with a size of -1, leading to undefined behavior.
    This commit makes sure that the actual node data (which depends on the size)
    is in the range start_of_object..start_of_object+size.
    
    Credit to OSS-Fuzz
    32ee5213
Name
Last commit
Last update
cython Loading commit data...
include Loading commit data...
libcnary Loading commit data...
m4 Loading commit data...
src Loading commit data...
test Loading commit data...
tools Loading commit data...
.gitignore Loading commit data...
AUTHORS Loading commit data...
COPYING Loading commit data...
COPYING.LESSER Loading commit data...
Makefile.am Loading commit data...
NEWS Loading commit data...
README Loading commit data...
autogen.sh Loading commit data...
configure.ac Loading commit data...
doxygen.cfg.in Loading commit data...