Project homepage Mailing List  Warmcat.com  API Docs  Github Mirror 
{"schema":"libjg2-1", "vpath":"/git/", "avatar":"/git/avatar/", "alang":"", "gen_ut":1752320666, "reponame":"libwebsockets", "desc":"libwebsockets lightweight C networking library", "owner": { "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" },"url":"https://libwebsockets.org/repo/libwebsockets", "f":3, "items": [ {"schema":"libjg2-1", "cid":"f261383f060f3501435c7a5117c4b80c", "commit": {"type":"commit", "time": 1750137884, "time_ofs": 60, "oid_tree": { "oid": "d5abe99040148b6a4004a868e99db7cf92e422ed", "alias": []}, "oid":{ "oid": "6a2542ded78ec41395a256dc20976ec2800d357b", "alias": []}, "msg": "cov: pm_deflate: protect against rx underflow", "sig_commit": { "git_time": { "time": 1750137884, "offset": 60 }, "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" }, "sig_author": { "git_time": { "time": 1750137882, "offset": 60 }, "name": "Andy Green", "email": "andy@warmcat.com", "md5": "c50933ca2aa61e0fe2c43d46bb6b59cb" }}, "body": "cov: pm_deflate: protect against rx underflow\n" , "diff": "diff --git a/lib/roles/ws/ext/extension-permessage-deflate.c b/lib/roles/ws/ext/extension-permessage-deflate.c\nindex 79c70ea..790db4e 100644\n--- a/lib/roles/ws/ext/extension-permessage-deflate.c\n+++ b/lib/roles/ws/ext/extension-permessage-deflate.c\n@@ -308,6 +308,13 @@ lws_extension_callback_pm_deflate(struct lws_context *context,\n \t\t * track how much input was used, and advance it\n \t\t */\n \n+\t\t/* COV says we can overflow if \u0022eb_in.len \u003d\u003d 0 and rx-\u003eavail_in \u003d\u003d 4\u0022 */\n+\n+\t\tif ((unsigned int)priv-\u003erx.avail_in \u003e (unsigned int)pmdrx-\u003eeb_in.len) {\n+\t\t\tlwsl_wsi_err(wsi, \u0022rx buffer underflow\u0022);\n+\t\t\treturn PMDR_FAILED;\n+\t\t}\n+\n \t\tpmdrx-\u003eeb_in.token \u003d pmdrx-\u003eeb_in.token +\n \t\t\t\t ((unsigned int)pmdrx-\u003eeb_in.len - (unsigned int)priv-\u003erx.avail_in);\n \t\tpmdrx-\u003eeb_in.len \u003d (int)priv-\u003erx.avail_in;\n","s":{"c":1752320666,"u": 3049}} ],"g": 3768,"chitpc": 0,"ehitpc": 0,"indexed":0 , "ab": 0, "si": 0, "db":0, "di":0, "sat":0, "lfc": "0000"}