search

nodejs / llparse

Generating parsers in LLVM IR
http://llparse.org
Other
584 stars 30 forks source link

table-lookup: always pad SSE blobs to prevent OOB #38

Closed indutny closed 4 years ago

indutny commented 4 years ago

The compiler may allocate the arrays at the end of the readable page, which could lead to page fault and termination of the program. Always append enough padding bytes to the SSE blobs to make sure that out-of-band read cannot happen.

Original-PR: https://github.com/nodejs/llparse/pull/37 Credit: jsteemann jan@arangodb.com

cc @jsteemann

indutny commented 4 years ago

Thank you!

indutny commented 4 years ago

@jsteemann published rebuilt llhttp@2.0.3 .