Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use readOrThrow() to detect premature EOF (backport #3005) #3006

Merged
merged 1 commit into from
Jul 4, 2024

Conversation

mergify[bot]
Copy link
Contributor

@mergify mergify bot commented Jul 4, 2024

Fixes an out-of-bounds read found by OSS-Fuzz. The bug looks pretty harmless to me, but I'll request a CVE and I think we should backport the fix to 0.28.x.


This is an automatic backport of pull request #3005 done by Mergify.

…l?id=68210

Use readOrThrow() to detect premature EOF.

(cherry picked from commit fc1fe45)
@kmilos kmilos added this to the v0.28.3 milestone Jul 4, 2024
@kmilos kmilos added bug OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/ labels Jul 4, 2024
@kmilos kmilos merged commit 3a28346 into 0.28.x Jul 4, 2024
61 of 62 checks passed
@mergify mergify bot deleted the mergify/bp/0.28.x/pr-3005 branch July 4, 2024 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug OSS-Fuzz Bug reported by https://google.github.io/oss-fuzz/
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants