zeek / spicy

C++ parser generator for dissecting protocols & files.
https://docs.zeek.org/projects/spicy
Other
243 stars 37 forks source link

Fix illegal stream content access through invalid view. #1799

Closed rsmmr closed 1 month ago

rsmmr commented 1 month ago

When a view's beginning ended up outside of the stream's valid range (e.g., because the stream has been trimmed in the meantime), we wouldn't catch that on access and attempt to access data that was no longer valid. This commit extends the safety checks accordingly.

Closes #1795.