Skip to content
Snippets Groups Projects
  1. Dec 13, 2018
    • Nick Terrell's avatar
      [libzstd] Fix infinite loop in decompression · aaea4ef9
      Nick Terrell authored
      When we switched `ZSTD_SKIPPABLEHEADERSIZE` to a macro, the places where we do:
      
          MEM_readLE32(ptr) + ZSTD_SKIPPABLEHEADERSIZE
      
      can now overflow `(unsigned)-8` to `0` and we infinite loop. We now check
      the frame size and reject sizes that overflow a U32.
      
      Note that this bug never made it into a release, and was only in the dev branch
      for a few days.
      
      Credit to OSS-Fuzz
      aaea4ef9
  2. Dec 12, 2018
  3. Dec 11, 2018
  4. Dec 07, 2018
  5. Dec 06, 2018
  6. Dec 05, 2018
  7. Dec 04, 2018
  8. Dec 03, 2018
  9. Dec 02, 2018
  10. Dec 01, 2018
Loading