Data corruption due to invalid pointer arithmatic in the http2 decoder

skupperproject / skupper-router

An application-layer router for Skupper networks

https://skupper.io

Apache License 2.0

14 stars 18 forks source link

Data corruption due to invalid pointer arithmatic in the http2 decoder #1522

Closed ganeshmurthy closed 1 month ago

ganeshmurthy commented 1 month ago

 13. address_of: Taking address with &data yields a singleton pointer.

CID 462711: (#2 of 2): Out-of-bounds access (ARRAY_VS_SINGLETON)
14. callee_ptr_arith: Passing &data to function skip_frame_payload which uses it as an array. This might corrupt or misinterpret adjacent memory locations