Open Information Security Foundation

07/30/2026

SZ 10:42 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

It's still the case for current main branch commit (8455efd9ac9be052f5f5424805559611e8531b16) Sergey Zhidkih

SZ 08:17 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

I can try to reproduce this on newer Suricata versions, as I has suspicions that it may not be the case anymore. Sergey Zhidkih

SZ 08:16 AM Suricata Bug #8353: Underflow in TmqhOutputPacketpool when calculating "outstanding"

Philippe Antoine wrote in #note-1:
> Which fuzz target did you use ? With which sanitizer and options ?
fuzz_decodepcapfile. Sergey Zhidkih

07/16/2026

SZ 03:40 PM Suricata Optimization #7966: Relevance of QA UBSan article

Philippe Antoine wrote in #note-3:
> > If wraping value around integer range is desired there's better way to do it.
> ...
Add explanatory comments to the code, create a documented UBSan blacklist, or add wrappers that are enabled only... Sergey Zhidkih

SZ 11:59 AM Suricata Bug #8232: Underflow in DefragInsertFrag in defrag.c

Samaresh Kumar singh wrote in #note-4:
> Thanks for the detailed analysis. The underflow is real, but I want to clarify why the - 1 is intentional, because the reasoning hinges on a detail of our comparator that isn't obvious.
> ...
No... Sergey Zhidkih

03/06/2026

SZ 03:20 PM Suricata Bug #8353 (Triaged): Underflow in TmqhOutputPacketpool when calculating "outstanding"

Fuzzer discovered case when "outstanding" become negative and thus underflows. Not sure if it's an actual bug by itself but since outstanding is unsigned integer it may point to some problem.
Attaching fuzzer backtrace and case. Sergey Zhidkih

01/16/2026

SZ 02:17 PM Suricata Bug #8232 (In Review): Underflow in DefragInsertFrag in defrag.c

During fuzzing, an underflow was discovered in ip defragmentation algorithm for the first fragment. Sergey Zhidkih

01/15/2026

SZ 03:34 PM Suricata Bug #8184 (In Review): Loop counters underflows across codebase

Sergey Zhidkih

01/05/2026

SZ 03:46 PM Suricata Bug #8184: Loop counters underflows across codebase

Victor Julien wrote in #note-1:
> Hi Sergey, you mention that "So I fixed all of them". Where did you fix this?
I haven't created a pull request for review yet since I'm on vacation right now. I will create a PR closer to the end of ... Sergey Zhidkih

12/29/2025

SZ 12:28 PM Suricata Bug #8184 (In Review): Loop counters underflows across codebase

During the fuzzing of sigpcap for 7.10.0, multiple occurrences of loop counter underflow were detected.
After investigation, it was determined that the issue affected 11 source code files.
Most of the loops contained underflow afte... Sergey Zhidkih