Nmap Development mailing list archives

PR #2954, Fix out of bounds reads in packet parsing


From: Domen Puncer Kugler via dev <dev () nmap org>
Date: Tue, 14 Jan 2025 11:19:15 +0000

Hi,

I've submitted a pull request a few months ago:
https://github.com/nmap/nmap/pull/2954

The PR includes following three commits:
- Fix out of bounds read in HopByHopHeader::validate
- Fix out of bounds read in PacketParser::split
- Add AFL test code for PacketParser

This was found as a part of a short Hackathon at NCC Group.
As far as I can tell, there is no security impact, but it would still be nice 
to see this fixed.

Kind regards

Attachment: smime.p7s
Description:

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at https://seclists.org/nmap-dev/

Current thread: