Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Fix int overflow in parser #694

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

sylr
Copy link
Contributor

@sylr sylr commented Feb 25, 2025

A maliciously crafted message with a bogus body length could make the parser panic if the body length is close to the int limit.

Fixes #678

A maliciously crafted message with a bogus body length could make the
parser panic if the body length is close to the int limit.

Fixes quickfixgo#678

Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
@sylr
Copy link
Contributor Author

sylr commented Mar 18, 2025

@ackleymi could you please review this ?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Panic in ParseMessage and newParser()->ReadMessage() due to malformed data
1 participant