Public/VeraCrypt
1
0 Fork 0
mirror of https://github.com/veracrypt/VeraCrypt.git synced 2026-10-05 16:46:35 -05:00
Code Activity

Merge commit from fork

Browse Source 
* Harden serializer deserialization bounds

* Finalize Unix serializer hardening

Validate object types before parsing and release owned objects on failure.
Enforce nesting limits through shared serialization entry points.

Mirror read/write size limits and reject embedded NULs while preserving
the wire format. Add regression tests for bounds, types, and cleanup.

Validated Linux self-tests, C++03 platform tests, and ASan/UBSan with leak
detection.

Co-authored-by: Damian Rickard <damian@rickard.us>

---------

Co-authored-by: Damian Rickard <damian@rickard.us>
Co-authored-by: Mounir IDRASSI <mounir.idrassi@amcrypto.jp>
This commit is contained in:
damianrickardDamian RickardMounir IDRASSI
 authored and GitHub committed 2026-09-30 20:12:20 +09:00
1 parent dea8fb0dc0
commit fb9d96c52d
25 files changed
+738 -171
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/Core/CoreException.cpp
+8 -8
View File
@@ -15,24 +15,24 @@
namespace VeraCrypt
{
void ElevationFailed::Deserialize (shared_ptr <Stream> stream)
void ElevationFailed::DeserializeData (shared_ptr <Stream> stream)
{
ExecutedProcessFailed::Deserialize (stream);
ExecutedProcessFailed::DeserializeData (stream);
}
void ElevationFailed::Serialize (shared_ptr <Stream> stream) const
void ElevationFailed::SerializeData (shared_ptr <Stream> stream) const
{
ExecutedProcessFailed::Serialize (stream);
ExecutedProcessFailed::SerializeData (stream);
}
void FilesystemDismountFailed::Deserialize (shared_ptr <Stream> stream)
void FilesystemDismountFailed::DeserializeData (shared_ptr <Stream> stream)
{
ExecutedProcessFailed::Deserialize (stream);
ExecutedProcessFailed::DeserializeData (stream);
}
void FilesystemDismountFailed::Serialize (shared_ptr <Stream> stream) const
void FilesystemDismountFailed::SerializeData (shared_ptr <Stream> stream) const
{
ExecutedProcessFailed::Serialize (stream);
ExecutedProcessFailed::SerializeData (stream);
}
#define TC_EXCEPTION(TYPE) TC_SERIALIZER_FACTORY_ADD(TYPE)