[PATCH 00/10] fix two PRs and guard against bad data
Indu Bhagat
ibhagatgnu@gmail.com
Thu Aug 27 22:41:36 GMT 2026
This patch series fixes two PRs (PR libsframe/33417 and PR
libsframe/34273) by adding necessary checks.
There remains few more fixes to be done in sframe_decoder_get_fres_buf
(and may be few more related APIs) to avoid buffer over-reads in event
of crafted/invalid SFrame input data, which I will address later in
separate patch(es).
Thanks,
Indu Bhagat (10):
libsframe: null check arg before writing to in sframe_encoder_write
libsframe: guard against malformed rep_block_size
libsframe: fix memory leak in sframe_decode
libsframe: validate FDE/FRE offsets in SFrame header
libsframe: handle invalid fre_type gracefully
libsframe: check error condition in sframe_decode_fre
libsframe: guard against buffer over-read in sframe_fde_tbl_init
libsframe: check for overflow in sframe_fde_tbl_alloc
libsframe: validate bounds before reads during endian flipping
libsframe: fix PR libsframe/34417
libsframe/sframe.c | 109 ++++++++++++++++++++++++++++++++++++---------
1 file changed, 89 insertions(+), 20 deletions(-)
--
2.43.0
More information about the Binutils
mailing list