Skip to content

HexSpell 1.2.1

Choose a tag to compare

View all tags
@CaddyGlow CaddyGlow released this 11 Oct 17:52
· 16 commits to main since this release
v1.2.1
e210611
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

  • General

    • Fixed: Return BufferOverflow for integer reads whose file offsets overflow usize.

  • PE

    • Fixed: Reject cyclic or excessively deep resource directory trees instead of overflowing the stack.

  • ELF

    • Fixed: Reject overflowing extended section-table offsets instead of panicking.
    • Fixed: Validate init/fini array extents before reserving entry storage.
    • Fixed: Validate symbol table extents before reserving entry storage.

  • Mach-O

    • Fixed: Reject cyclic export tries using an iterative traversal instead of overflowing the call stack.
    • Fixed: Validate symbol table extents before reserving entry storage.

Includes executable-format fuzzing harnesses and regression coverage.

Crate: https://crates.io/crates/caddy-hexspell/1.2.1

Assets 3
Loading