  
|
fb9d96c52d
|
Merge commit from fork
* Harden serializer deserialization bounds
* Finalize Unix serializer hardening
Validate object types before parsing and release owned objects on failure.
Enforce nesting limits through shared serialization entry points.
Mirror read/write size limits and reject embedded NULs while preserving
the wire format. Add regression tests for bounds, types, and cleanup.
Validated Linux self-tests, C++03 platform tests, and ASan/UBSan with leak
detection.
Co-authored-by: Damian Rickard <damian@rickard.us>
---------
Co-authored-by: Damian Rickard <damian@rickard.us>
Co-authored-by: Mounir IDRASSI <mounir.idrassi@amcrypto.jp>
|
2026-09-30 20:12:20 +09:00 |
|