Open Information Security Foundation

10/21/2026

SZ 04:52 PM Suricata Bug #9247 (New): Type mismatch in bytetest/bytejump

During fuzzing of fuzz_siginit with implicit conversion sanitezers two overflows were found:
{{collapse(Bytest) Sergey Zhidkih

SZ 02:40 PM Suricata Optimization #9246 (New): Replace magical numbers in bytetest/bytejump/util-byte by macro

Hello! So recently I was triaging some old sanitizers reports in detect-bytejump/detect-bytest and stumbled across multiple explanations of same magical numbers:
{{collapse Sergey Zhidkih

07/30/2026

SZ 10:42 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

It's still the case for current main branch commit (8455efd9ac9be052f5f5424805559611e8531b16) Sergey Zhidkih

SZ 08:17 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

I can try to reproduce this on newer Suricata versions, as I has suspicions that it may not be the case anymore. Sergey Zhidkih

SZ 08:16 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

Philippe Antoine wrote in #note-1:
> Which fuzz target did you use ? With which sanitizer and options ?
fuzz_decodepcapfile. Sergey Zhidkih

07/16/2026

SZ 03:40 PM Suricata Optimization #7966: Relevance of QA UBSan article

Philippe Antoine wrote in #note-3:
> > If wraping value around integer range is desired there's better way to do it.
> ...
Add explanatory comments to the code, create a documented UBSan blacklist, or add wrappers that are enabled only... Sergey Zhidkih

SZ 11:59 AM Suricata Bug #8232: Underflow in DefragInsertFrag in defrag.c

Samaresh Kumar singh wrote in #note-4:
> Thanks for the detailed analysis. The underflow is real, but I want to clarify why the - 1 is intentional, because the reasoning hinges on a detail of our comparator that isn't obvious.
> ...
No... Sergey Zhidkih

03/06/2026

SZ 03:20 PM Suricata Bug #8353 (Triaged): Underflow in TmqhOutputPacketpool when calculating "outstanding"

Fuzzer discovered case when "outstanding" become negative and thus underflows. Not sure if it's an actual bug by itself but since outstanding is unsigned integer it may point to some problem.
Attaching fuzzer backtrace and case. Sergey Zhidkih

01/16/2026

SZ 02:17 PM Suricata Bug #8232 (Closed): Underflow in DefragInsertFrag in defrag.c

During fuzzing, an underflow was discovered in ip defragmentation algorithm for the first fragment. Sergey Zhidkih

01/15/2026

SZ 03:34 PM Suricata Bug #8184 (In Review): Loop counters underflows across codebase

Sergey Zhidkih