Open Information Security Foundation

07/16/2026

SZ 03:40 PM Suricata Optimization #7966: Relevance of QA UBSan article

Philippe Antoine wrote in #note-3:
> > If wraping value around integer range is desired there's better way to do it.
> ...
Add explanatory comments to the code, create a documented UBSan blacklist, or add wrappers that are enabled only... Sergey Zhidkih

SZ 11:59 AM Suricata Bug #8232: Underflow in DefragInsertFrag in defrag.c

Samaresh Kumar singh wrote in #note-4:
> Thanks for the detailed analysis. The underflow is real, but I want to clarify why the - 1 is intentional, because the reasoning hinges on a detail of our comparator that isn't obvious.
> ...
No... Sergey Zhidkih

03/06/2026

SZ 03:20 PM Suricata Bug #8353 (New): Underflow in TmqhOutputPacketpool when calculating "outstanding"

Fuzzer discovered case when "outstanding" become negative and thus underflows. Not sure if it's an actual bug by itself but since outstanding is unsigned integer it may point to some problem.
Attaching fuzzer backtrace and case. Sergey Zhidkih

01/16/2026

SZ 02:17 PM Suricata Bug #8232 (In Review): Underflow in DefragInsertFrag in defrag.c

During fuzzing, an underflow was discovered in ip defragmentation algorithm for the first fragment. Sergey Zhidkih

01/15/2026

SZ 03:34 PM Suricata Bug #8184 (In Review): Loop counters underflows across codebase

Sergey Zhidkih

01/05/2026

SZ 03:46 PM Suricata Bug #8184: Loop counters underflows across codebase

Victor Julien wrote in #note-1:
> Hi Sergey, you mention that "So I fixed all of them". Where did you fix this?
I haven't created a pull request for review yet since I'm on vacation right now. I will create a PR closer to the end of ... Sergey Zhidkih

12/29/2025

SZ 12:28 PM Suricata Bug #8184 (In Review): Loop counters underflows across codebase

During the fuzzing of sigpcap for 7.10.0, multiple occurrences of loop counter underflow were detected.
After investigation, it was determined that the issue affected 11 source code files.
Most of the loops contained underflow afte... Sergey Zhidkih

12/01/2025

SZ 02:01 PM Suricata Bug #8146: utils-spm-hs: missing deallocators on hs_compile failure

May I claim this issue and get developer role? Sergey Zhidkih

SZ 01:38 PM Suricata Bug #8146 (Closed): utils-spm-hs: missing deallocators on hs_compile failure

During fuzzing siginit discovered two minor memory leaks in HSBuildDatabase which is caused by missing deallocators when Hyperscan fails to compile expression.
The problem is missing deallocator for expression and missing deallocator ... Sergey Zhidkih

11/27/2025

SZ 02:58 PM Suricata Security #8143: Misalligned access to ip header data.

Victor Julien wrote in #note-2:
> All platforms we care about support unaligned access. There may be a small perf penalty but so would there be with memcpy. The claim of DoS is not backup up by any data.
Can you list all mainly suppo... Sergey Zhidkih