Skip to content

add bounds checks to prevent OOB read on verified buffers#8985

Open
rootvector2 wants to merge 2 commits intogoogle:masterfrom
rootvector2:minireflect-bounds-check-oob
Open

add bounds checks to prevent OOB read on verified buffers#8985
rootvector2 wants to merge 2 commits intogoogle:masterfrom
rootvector2:minireflect-bounds-check-oob

Conversation

@rootvector2
Copy link
Contributor

Fix OOB read in minireflect on verified buffers

Adds bounds checks to minireflect traversal to prevent out-of-bounds
reads when processing malformed but verifier-accepted buffers.

  • Validates scalar reads, pointer offsets, strings, and vectors
  • Keeps existing APIs unchanged
  • Adds size-aware overload for safe usage

Includes a small regression test. All tests pass, no ASAN issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant