jmestwa-coder 129cdc43fb bound rule table index in OP_PUSH_RULE and OP_INIT_RULE (#2230) ...

Rule index read from compiled bytecode is used to index rules_table without a bounds check:
- OP_PUSH_RULE dereferences rules_table[r1.i] and indexes rule_matches_flags with the same value, unchecked
- OP_INIT_RULE only had an assert, which is a no-op under NDEBUG
- OP_MATCH_RULE right below them already guards the index with ensure_within_rules_arena

Added the same YR_PARANOID_EXEC guard to both. A crafted .yrc with an out-of-range rule index reaches this through yr_rules_scan_mem and reads past the table; test-exec covers it.

2026-07-22 08:57:13 +02:00

..

data

read dotnet and pe file fields through unaligned helpers (#2210)

2026-06-24 11:49:17 +02:00

oss-fuzz

tests: Add new fuzzers to be consumed by OSS-Fuzz (#2197)

2026-05-06 12:09:01 +02:00

blob.h

byte-swap sh_entry_count in elf symtab/dynsym link check (#2214)

2026-06-30 20:20:12 +02:00

convention-portable-modifiers

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

gcov-summary

Code coverage build (#1374)

2020-10-08 11:52:55 +02:00

mapper.c

Minor re-styling.

2021-08-24 11:12:16 +02:00

test-alignment.c

Remove assertion from test-aligment.c

2024-04-08 10:53:32 +02:00

test-api.c

validate summary counts in yr_rules_from_arena (#2222)

2026-07-14 12:24:40 +02:00

test-arena.c

validate relocation target ref in yr_arena_load_stream (#2213)

2026-06-30 20:19:53 +02:00

test-async.c

Tidy #include's (#1769)

2022-08-26 12:04:32 +02:00

test-atoms.c

Add test case for uppercase atoms.

2022-05-28 19:30:10 +02:00

test-bitmask.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-dex.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-dotnet.c

read dotnet and pe file fields through unaligned helpers (#2210)

2026-06-24 11:49:17 +02:00

test-elf.c

byte-swap sh_entry_count in elf symtab/dynsym link check (#2214)

2026-06-30 20:20:12 +02:00

test-exception.c

feat: handle SIGBUS / SIGSEGV only when originating from YARA's memory blocks (#2020)

2023-12-08 00:12:05 +01:00

test-exec.c

bound rule table index in OP_PUSH_RULE and OP_INIT_RULE (#2230)

2026-07-22 08:57:13 +02:00

test-iterators.c

bound iterator item count in yr_execute_code (#2216)

2026-06-30 20:20:42 +02:00

test-macho.c

Fix endianness issues in macho module (#2041)

2024-02-12 15:23:09 +01:00

test-magic.c

test-magic: Update expected strings (#1853) (#1854)

2023-01-03 22:40:39 +01:00

test-math.c

Add test case for math.entropy where input is an empty string.

2024-03-25 10:49:06 +01:00

test-pb.c

Tests: Set top_srcdir variable instead of changing directory (#1466)

2021-03-22 10:33:03 +01:00

test-pe.c

guard against undersized rich header in pe_parse_rich_signature (#2200)

2026-06-01 12:34:37 +02:00

test-re-split.c

bound repeat stack depth in _yr_re_fiber_sync (#2229)

2026-07-22 08:54:38 +02:00

test-rules.c

fix: Fix INT64_MIN UB in constant folding (*, \, unary -) (#2211)

2026-06-30 20:19:29 +02:00

test-stack.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-string.c

fix error handling in string.to_int() (#1842)

2022-12-30 11:06:34 +01:00

test-version.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

util.c

Fix test cases

2024-01-15 22:31:18 +01:00

util.h

Autoformat test/util.h

2024-01-15 16:34:12 +01:00