Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2024-34403] Protect against integer overflow in ComposeQueryMallocExMm (related to #183) #186

Conversation

hartwork
Copy link
Member

@hartwork hartwork commented Apr 28, 2024

Requires string input that is longer than INT_MAX / 6 - 1 to exploit.

Related to issue #183

@hartwork hartwork added bug Something isn't working security labels Apr 28, 2024
@hartwork hartwork added this to the 0.9.8 milestone Apr 28, 2024
@hartwork hartwork changed the title Protect against integer overflow in ComposeQueryMallocExMm Protect against integer overflow in ComposeQueryMallocExMm (related to #183) Apr 28, 2024
Requires string input that is longer than INT_MAX / 6 - 1 to exploit.
@hartwork hartwork force-pushed the issue-183-prevent-integer-overflow-in-compose-query-malloc-ex-mm branch from 628fe0d to bb6b9b3 Compare April 28, 2024 20:38
@hartwork hartwork merged commit 005a5d4 into master Apr 30, 2024
6 checks passed
@hartwork hartwork changed the title Protect against integer overflow in ComposeQueryMallocExMm (related to #183) [CVE-2024-34403] Protect against integer overflow in ComposeQueryMallocExMm (related to #183) May 3, 2024
@hartwork hartwork deleted the issue-183-prevent-integer-overflow-in-compose-query-malloc-ex-mm branch May 5, 2024 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant