Skip to content

(smile) Handle invalid chunked-binary-format length gracefully #263

@cowtowncoder

Description

@cowtowncoder

(found by OssFuzzer https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32339)

Another nice finding by ozz-fuzz project: looks like length handling for chunked (7-bit safe) binary blocks is missing some checks to either prevent use of negative lengths, or avoid int overflow.

Metadata

Metadata

Assignees

No one assigned

    Labels

    fuzzIssue found by OssFuzzsmile

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions