diff options
| author | Barinzaya <barinzaya@gmail.com> | 2025-04-29 08:19:43 -0400 |
|---|---|---|
| committer | Barinzaya <barinzaya@gmail.com> | 2025-04-29 08:19:43 -0400 |
| commit | 3f5e09a0df18201e30a202a2074dc0c0a283c01b (patch) | |
| tree | be9789a8c2ade6d4560500e5436be2486499b3cb /src/check_expr.cpp | |
| parent | 4f00224dd2908dc21c5412eba9167c63a217bf33 (diff) | |
Fixed an overflow when decoding a large CBOR slice.
The initial allocation for the slice is limited to prevent untrusted
data from forcing a huge allocation, but then the dynamic array was
created with a capacity of the unlimited length, rather than the actual
capacity of the allocation. This was causing a buffer overrun.
Diffstat (limited to 'src/check_expr.cpp')
0 files changed, 0 insertions, 0 deletions