Skip to content

fix: add integer overflow check in st.c...#10

Merged
cosmo0920 merged 1 commit into
fluent:masterfrom
orbisai0security:fix-integer-overflow-malloc-st-c
Jun 1, 2026
Merged

fix: add integer overflow check in st.c...#10
cosmo0920 merged 1 commit into
fluent:masterfrom
orbisai0security:fix-integer-overflow-malloc-st-c

Conversation

@orbisai0security

Copy link
Copy Markdown
Contributor

Summary

Fix high severity security issue in st.c.

Vulnerability

Field Value
ID utils.custom.integer-overflow-malloc
Severity HIGH
Scanner semgrep
Rule utils.custom.integer-overflow-malloc
File st.c:624

Description: Arithmetic multiplication used to compute allocation size without overflow check. If the multiplication wraps, a too-small buffer is allocated, leading to heap overflow. Check for overflow before allocating.

Changes

  • st.c

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • LLM code review passed

Automated security fix by OrbisAI Security

@cosmo0920

Copy link
Copy Markdown
Collaborator

We need to add Signed-off line in your commit. Could you add the line?

Automated security fix generated by OrbisAI Security

Signed-off-by: OrbisAI Security <mediratta01.pally@gmail.com>
@orbisai0security orbisai0security force-pushed the fix-integer-overflow-malloc-st-c branch from 05ce23e to 9c3b6de Compare June 1, 2026 10:30
@orbisai0security

Copy link
Copy Markdown
Contributor Author

We need to add Signed-off line in your commit. Could you add the line?

done.

@cosmo0920 cosmo0920 merged commit 0335a64 into fluent:master Jun 1, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants