Skip to content

security-fix-5 - #467

Open
shubhangi-shrivastava wants to merge 5 commits into
masterfrom
security-fix-5
Open

security-fix-5#467
shubhangi-shrivastava wants to merge 5 commits into
masterfrom
security-fix-5

Conversation

@shubhangi-shrivastava

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Shubhangi Shrivastava <shubhangi.shrivastava@intel.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR aims to harden the Gough NFA runtime against out-of-bounds reads by validating SOM slot indices before indexing som->slots[...] during report generation.

Changes:

  • Added bounds checks around SOM slot indexing in doReports() to prevent OOB reads when som slot indices are invalid.
  • Introduced early-return/skip behavior when encountering invalid SOM slot indices in cached and non-cached reporting paths.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread src/nfa/gough.c
Signed-off-by: Shubhangi Shrivastava <shubhangi.shrivastava@intel.com>
Signed-off-by: Shubhangi Shrivastava <shubhangi.shrivastava@intel.com>
Signed-off-by: Shubhangi Shrivastava <shubhangi.shrivastava@intel.com>
Signed-off-by: Shubhangi Shrivastava <shubhangi.shrivastava@intel.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants