mbox series

[00/10] fix two PRs and guard against bad data

Message ID 20260827224146.3391610-1-ibhagatgnu@gmail.com
Headers
Series fix two PRs and guard against bad data |

Message

Indu Bhagat Aug. 27, 2026, 10:41 p.m. UTC 
  This patch series fixes two PRs (PR libsframe/33417 and PR
libsframe/34273) by adding necessary checks.

There remains few more fixes to be done in sframe_decoder_get_fres_buf
(and may be few more related APIs) to avoid buffer over-reads in event
of crafted/invalid SFrame input data, which I will address later in
separate patch(es).

Thanks,

Indu Bhagat (10):
  libsframe: null check arg before writing to in sframe_encoder_write
  libsframe: guard against malformed rep_block_size
  libsframe: fix memory leak in sframe_decode
  libsframe: validate FDE/FRE offsets in SFrame header
  libsframe: handle invalid fre_type gracefully
  libsframe: check error condition in sframe_decode_fre
  libsframe: guard against buffer over-read in sframe_fde_tbl_init
  libsframe: check for overflow in sframe_fde_tbl_alloc
  libsframe: validate bounds before reads during endian flipping
  libsframe: fix PR libsframe/34417

 libsframe/sframe.c | 109 ++++++++++++++++++++++++++++++++++++---------
 1 file changed, 89 insertions(+), 20 deletions(-)