Skip to content

[C++] IPC reader does not always check for short reads #49896

@pitrou

Description

@pitrou

Describe the bug, including details regarding any error messages, version, and platform.

IO methods like ReadAt can return less bytes than asked for if the file is too short, but the IPC reader doesn't always detect for this situation. On invalid IPC files, this can produce issues down the road such as half-initialized buffers and large processing times (with a potential denial of service).

This issue was detected by OSS-Fuzz: https://issues.oss-fuzz.com/issues/489758017

Component(s)

C++

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions