ludwig-cf / ludwig

A lattice Boltzmann code for complex fluids
https://ludwig.epcc.ed.ac.uk
Other
54 stars 35 forks source link

Security alerts #283

Closed kevinstratford closed 5 months ago

kevinstratford commented 1 year ago

There are two uncontrolled paths appearing in colloid_io.c

https://github.com/ludwig-cf/ludwig/security/code-scanning/784 https://github.com/ludwig-cf/ludwig/security/code-scanning/785

It should be possible to sort this out.

kevinstratford commented 5 months ago

This has actually resisted an obvious fix. The colloidal i/o may need to wait until it gets a full overhaul.