lwext4 v1.0.2

Release focuses on security and robustness improvements: addressing memory safety issues, invalid filesystem metadata handling, and potential crashes when processing malformed ext4 images.

Bug fixes:

• Out-of-Bounds Read in ext4_dir_dx_checksum(): added validation of directory entry counts against their limits in ext4_dir_dx_csum_verify() and ext4_dir_set_dx_csum() to prevent reading beyond the directory block buffer (#169, #6);
• Out-of-Bounds Write in ext4_fs_init_block_bitmap(): added validation of block bitmap addresses against block group boundaries to prevent integer underflow and out-of-bounds bitmap accesses (#170, #6);
• Heap-Buffer-Overflow in ext4_fs_init_block_bitmap(): added validation of inode table boundaries and restricted bitmap modifications to valid block ranges, preventing out-of-bounds memory accesses (#171, #6);
• Out-of-Bounds Write in ext4_fs_mark_bitmap_end(): added block group size validation and changed bitmap bit indices to unsigned integers to prevent invalid memory accesses caused by integer conversion (#172, #6);
• Out-of-Bounds Write in ext4_fs_init_block_bitmap(): added inode bitmap address validation to prevent out-of-bounds writes caused by corrupted block group descriptors (#173, #6);
• Floating Point Exception (FPE) in ext4_fs_init_inode_table(): extended ext4_sb_check() to validate log_block_size and inode_size, preventing division by zero when processing malformed superblocks (#174, #6).
• NULL pointer dereference / Use-After-Free in ext4_find_extent(): improved error handling to prevent successful returns after the extent path has been freed; added NULL pointer validation in ext4_ext_insert_extent(), ext4_extent_remove_space(), and ext4_extent_get_blocks() GHSA-fgwm-5852-vw84 (#6);

Documentation:

• SECURITY.md has been added.