Skip to content

Fix buffer overflow and parsing issues in daemon and lib - #911

Open
minminlittleshrimp wants to merge 1 commit into
masterfrom
combine/related-prs
Open

Fix buffer overflow and parsing issues in daemon and lib#911
minminlittleshrimp wants to merge 1 commit into
masterfrom
combine/related-prs

Conversation

@minminlittleshrimp

Copy link
Copy Markdown
Collaborator
  • Fix out-of-bounds read in get_log_info_v2 and set_log_level_v2
  • Fix heap buffer overflow in dlt_with_filename_and_line_number
  • Fix unregister_context_v2 response construction
  • Replace unbounded strcat with snprintf in storage_dir_info
  • Add bounds checks for variable-length apid/ctid parsing

- Fix out-of-bounds read in get_log_info_v2 and set_log_level_v2
- Fix heap buffer overflow in dlt_with_filename_and_line_number
- Fix unregister_context_v2 response construction
- Replace unbounded strcat with snprintf in storage_dir_info
- Add bounds checks for variable-length apid/ctid parsing

Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com>
Signed-off-by: Santhosh Sivan Murugan <Murugan.SanthoshSivan@in.bosch.com>
Signed-off-by: Luu Quang Minh <Minh.LuuQuang@vn.bosch.com>
@LocutusOfBorg

Copy link
Copy Markdown
Contributor

sigh, binaries were committed too @minminlittleshrimp :)

@minminlittleshrimp

minminlittleshrimp commented Aug 26, 2026

Copy link
Copy Markdown
Collaborator Author

sigh, binaries were committed too @minminlittleshrimp :)

That why I hate to rework on the AI- PR, slop and vuln everywhere

Lemme check your point

@minminlittleshrimp

Copy link
Copy Markdown
Collaborator Author

It my fault, diff build dir cannot be excluded @LocutusOfBorg thanks for notifying 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants