search

ska-sa / spead2

Library for the Streaming Protocol for Exchange of Astronomical Data (SPEAD)
http://spead2.readthedocs.io/en/latest/
GNU Lesser General Public License v3.0
23 stars 14 forks source link

Unsafe use of load_bytes_be #254

Open bmerry opened 1 year ago

bmerry commented 1 year ago

Some code that calls load_bytes_be doesn't check that the size is within the legal limit. This could cause an assertion failure (or crash in release) if using certain item IDs with a large non-immediate payload.