Skip to content

fix: add buffer-length check in packet.c#383

Merged
game-stop merged 1 commit into
game-stop:masterfrom
orbisai0security:fix-v001-packet-overflow
May 27, 2026
Merged

fix: add buffer-length check in packet.c#383
game-stop merged 1 commit into
game-stop:masterfrom
orbisai0security:fix-v001-packet-overflow

Conversation

@orbisai0security
Copy link
Copy Markdown
Contributor

Summary

Fix critical severity security issue in veejay-current/veejay-core/libvjnet/packet.c.

Vulnerability

Field Value
ID V-001
Severity CRITICAL
Scanner multi_agent_ai
Rule V-001
File veejay-current/veejay-core/libvjnet/packet.c:53
CWE CWE-120

Description: The packet.c file performs multiple veejay_memcpy operations using CHUNK_SIZE and len values derived from network packet headers without validating that these sizes fit within the destination buffer boundaries. An attacker sending crafted network packets with manipulated size fields can trigger heap buffer overflows, enabling remote code execution.

Changes

  • veejay-current/veejay-core/libvjnet/packet.c
  • veejay-current/veejay-core/libvjnet/mcastreceiver.c

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • LLM code review passed

Automated security fix by OrbisAI Security

Automated security fix generated by OrbisAI Security
@sonarqubecloud
Copy link
Copy Markdown

@game-stop game-stop merged commit 634db50 into game-stop:master May 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants