[PATCH 00/10] fix two PRs and guard against bad data

Indu Bhagat <[email protected]>
Newsgroups gmane.comp.gnu.binutils
Message-ID <[email protected]>
This patch series fixes two PRs (PR libsframe/33417 and PR
libsframe/34273) by adding necessary checks.

There remains few more fixes to be done in sframe_decoder_get_fres_buf
(and may be few more related APIs) to avoid buffer over-reads in event
of crafted/invalid SFrame input data, which I will address later in
separate patch(es).

Thanks,

Indu Bhagat (10):
  libsframe: null check arg before writing to in sframe_encoder_write
  libsframe: guard against malformed rep_block_size
  libsframe: fix memory leak in sframe_decode
  libsframe: validate FDE/FRE offsets in SFrame header
  libsframe: handle invalid fre_type gracefully
  libsframe: check error condition in sframe_decode_fre
  libsframe: guard against buffer over-read in sframe_fde_tbl_init
  libsframe: check for overflow in sframe_fde_tbl_alloc
  libsframe: validate bounds before reads during endian flipping
  libsframe: fix PR libsframe/34417

 libsframe/sframe.c | 109 ++++++++++++++++++++++++++++++++++++---------
 1 file changed, 89 insertions(+), 20 deletions(-)

-- 
2.43.0
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.