Skip to content
This repository has been archived by the owner on Aug 15, 2021. It is now read-only.

v0.10.2 - Fix stack overflow
Compare
Choose a tag to compare
@pyfisch pyfisch released this 03 Oct 18:31
· 19 commits to master since this release
v0.10.2
0f0c2d8

Changes:

  • Fix stack overflow caused by nested tags reported by Eric Rafaloff at Trail of Bits.
  • #147 The functions 'to_vec' and 'from_slice' are available in no_std environments if alloc is present.

Deeply nested tags like 17(17(17(17(17(17(...17(17(17("foobar"))))...))) may cause a stack overflow. Malicious input can exploit this to crash the program while decoding the file.

Assets 2
Loading