Project

General

Profile

Actions

Bug #3720

closed

Incorrect handling of ASN1 relative_offset keyword

Added by Emmanuel Thompson over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport

Description

The relative_offset keyword option allows to read past the front of the buffer with a negative offset, no bounds checking is done on this i32 value and is not relative to the last "content" match


Related issues

Copied to Bug #3738: Incorrect handling of ASN1 relative_offset keywordClosedShivani BhardwajActions
Copied to Bug #3739: Incorrect handling of ASN1 relative_offset keywordClosedJeff LucovskyActions
Actions #2

Updated by Victor Julien over 1 year ago

  • Status changed from New to In Review
  • Target version set to 6.0.0beta1
  • Label Needs backport added
Actions #3

Updated by Jeff Lucovsky over 1 year ago

  • Copied to Bug #3738: Incorrect handling of ASN1 relative_offset keyword added
Actions #4

Updated by Jeff Lucovsky over 1 year ago

  • Copied to Bug #3739: Incorrect handling of ASN1 relative_offset keyword added
Actions

Also available in: Atom PDF