[PATCH 00/10] fix two PRs and guard against bad data
Indu Bhagat <[email protected]>
| Newsgroups | gmane.comp.gnu.binutils |
|---|---|
| Message-ID | <[email protected]> |
This patch series fixes two PRs (PR libsframe/33417 and PR libsframe/34273) by adding necessary checks. There remains few more fixes to be done in sframe_decoder_get_fres_buf (and may be few more related APIs) to avoid buffer over-reads in event of crafted/invalid SFrame input data, which I will address later in separate patch(es). Thanks, Indu Bhagat (10): libsframe: null check arg before writing to in sframe_encoder_write libsframe: guard against malformed rep_block_size libsframe: fix memory leak in sframe_decode libsframe: validate FDE/FRE offsets in SFrame header libsframe: handle invalid fre_type gracefully libsframe: check error condition in sframe_decode_fre libsframe: guard against buffer over-read in sframe_fde_tbl_init libsframe: check for overflow in sframe_fde_tbl_alloc libsframe: validate bounds before reads during endian flipping libsframe: fix PR libsframe/34417 libsframe/sframe.c | 109 ++++++++++++++++++++++++++++++++++++--------- 1 file changed, 89 insertions(+), 20 deletions(-) -- 2.43.0