[PATCH 00/10] fix two PRs and guard against bad data

Indu Bhagat ibhagatgnu@gmail.com
Thu Aug 27 22:41:36 GMT 2026


This patch series fixes two PRs (PR libsframe/33417 and PR
libsframe/34273) by adding necessary checks.

There remains few more fixes to be done in sframe_decoder_get_fres_buf
(and may be few more related APIs) to avoid buffer over-reads in event
of crafted/invalid SFrame input data, which I will address later in
separate patch(es).

Thanks,

Indu Bhagat (10):
  libsframe: null check arg before writing to in sframe_encoder_write
  libsframe: guard against malformed rep_block_size
  libsframe: fix memory leak in sframe_decode
  libsframe: validate FDE/FRE offsets in SFrame header
  libsframe: handle invalid fre_type gracefully
  libsframe: check error condition in sframe_decode_fre
  libsframe: guard against buffer over-read in sframe_fde_tbl_init
  libsframe: check for overflow in sframe_fde_tbl_alloc
  libsframe: validate bounds before reads during endian flipping
  libsframe: fix PR libsframe/34417

 libsframe/sframe.c | 109 ++++++++++++++++++++++++++++++++++++---------
 1 file changed, 89 insertions(+), 20 deletions(-)

-- 
2.43.0



More information about the Binutils mailing list