Stephen Donnelly - Open Information Security Foundation

SD Stephen Donnelly

	open	closed	Total
Assigned issues	3	7	10
Reported issues	1	5	6

Project	Roles	Registered on
Suricata	Developer	08/05/2026
Suricata-Update	Developer	08/05/2026

SD 02:42 AM Suricata Bug #8962 (In Review): erf/file: ERF PAD and META type records and extension headers are not supported: PR https://github.com/OISF/suricata/pull/16135 Stephen Donnelly
SD 02:42 AM Suricata Bug #8865 (In Review): erf/file: Heap buffer overflow in ERF file reader via untrusted rlen field: PR https://github.com/OISF/suricata/pull/16135 Stephen Donnelly
SD 02:41 AM Suricata Bug #8836 (In Review): erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder: PR https://github.com/OISF/suricata/pull/16135 Stephen Donnelly

SD 11:38 PM Suricata Bug #8812 (Closed): stats: wrong registration causes compilation errors with --enable-dag: Stephen Donnelly

SD 11:53 PM Suricata Bug #8962 (In Review): erf/file: ERF PAD and META type records and extension headers are not supported: The ERF format defines PAD and META type records which may exist in packet trace files and can/should be skipped by Suricata. The presence of these record types currently stops Suricata reading the input file.
The ERF format defines e... Stephen Donnelly

SD 11:02 PM Suricata Bug #8836: erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder: Victor Julien wrote in #note-3:
> @sfd do you have interest in looking into this?
Yes I can take a look.
I agree there is a bug, but the analysis looks a little off.
We should be using a derivative of rlen for DecodeEthernet(),... Stephen Donnelly
SD 02:16 AM Suricata Bug #8804 (In Review): dag: Infinite loop in DAG record processing when rlen < dag_record_size (8.0.x backport): PR https://github.com/OISF/suricata/pull/16018 Stephen Donnelly
SD 01:22 AM Suricata Bug #8797: dag: Infinite loop in DAG record processing when rlen < dag_record_size: Merged to main in https://github.com/OISF/suricata/pull/16014 by victor Stephen Donnelly

SD 10:14 PM Suricata Bug #8797: dag: Infinite loop in DAG record processing when rlen < dag_record_size: Raised PR with squashed commits
https://github.com/OISF/suricata/pull/16011 Stephen Donnelly
SD 04:05 AM Suricata Bug #8797 (In Review): dag: Infinite loop in DAG record processing when rlen < dag_record_size: PR raised
https://github.com/OISF/suricata/pull/16004 Stephen Donnelly

Also available in: Atom