Out-of-bounds read In github.com/blakesmith/ar
Description
Panic on negative member size in Reader.Read in github.com/blakesmith/ar Reader.Next parses the 10-byte decimal size field of an archive member header with strconv.ParseInt without rejecting negative values. A header with a negative size leaves the reader with a negative remaining byte count, causing the subsequent call to Reader.Read to panic with a slice bounds out of range error when slicing the caller's buffer.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
 go |
Aliases
1. 2.
References
1. 2.