diff options
| author | user <user@clank> | 2026-08-19 22:48:31 +0200 |
|---|---|---|
| committer | user <user@clank> | 2026-08-19 22:48:31 +0200 |
| commit | 009350acbcd4360680b8fa228d8cd03a2f2b5e93 (patch) | |
| tree | ef0eadb14cc8186829c4b7ce46955ea88443a405 /include | |
| parent | webdemo: the theme symlink is a dependency of the image (diff) | |
| download | slosh-009350acbcd4360680b8fa228d8cd03a2f2b5e93.tar.gz slosh-009350acbcd4360680b8fa228d8cd03a2f2b5e93.tar.xz slosh-009350acbcd4360680b8fa228d8cd03a2f2b5e93.zip | |
parsers: fix seven bugs found by fuzzing
kdl: heap-buffer-overflow on trailing backslash in a string (a"\)
jsonval: heap-buffer-overflow on truncated \uXXXX escape ("\u)
jsonval: UB float-to-long cast on out-of-range numbers (2e22)
expr: UB signed overflow in arithmetic ops — wrap as uint32
expr: INT32_MIN / -1 SIGFPE guard in OP_DIV/OP_MOD
expr: stack overflow on deep nesting — add MAX_DEPTH 256
expr: 64-bit + saturation in OP_DIST to prevent squared overflow
input: NULL memcpy in input_timeout's re-parse path
input: signed overflow in CSI and SGR mouse parameter accumulation
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions
