jmestwa-coder def0eb0a1a check reloc buffer_id before deref in yr_arena_load_stream (#2202) ...

noticed the relocation loop in yr_arena_load_stream reads b->data before it checks reloc_ref.buffer_id against num_buffers. the id comes straight from the loaded stream, so a crafted reloc entry with a large buffer_id indexes far past the 16-slot buffers array and reads out of bounds. moving the range check ahead of the dereference rejects it as corrupt first. looks like the check order got flipped in #2178. added a regression test in test-arena.c.

2026-06-16 10:32:03 +02:00

..

data

guard against undersized rich header in pe_parse_rich_signature (#2200)

2026-06-01 12:34:37 +02:00

oss-fuzz

tests: Add new fuzzers to be consumed by OSS-Fuzz (#2197)

2026-05-06 12:09:01 +02:00

blob.h

Fix regression introduced in 94299eee38.

2021-01-29 12:15:59 +01:00

convention-portable-modifiers

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

gcov-summary

Code coverage build (#1374)

2020-10-08 11:52:55 +02:00

mapper.c

Minor re-styling.

2021-08-24 11:12:16 +02:00

test-alignment.c

Remove assertion from test-aligment.c

2024-04-08 10:53:32 +02:00

test-api.c

Add callback for notifying about slow rules (#1921)

2023-05-25 21:20:46 +02:00

test-arena.c

check reloc buffer_id before deref in yr_arena_load_stream (#2202)

2026-06-16 10:32:03 +02:00

test-async.c

Tidy #include's (#1769)

2022-08-26 12:04:32 +02:00

test-atoms.c

Add test case for uppercase atoms.

2022-05-28 19:30:10 +02:00

test-bitmask.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-dex.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-dotnet.c

Add parsing of .NET user types from .NET metadata stream (#1605)

2022-06-23 12:36:22 +02:00

test-elf.c

fix telfhash computation on x64 specific functions (#1847)

2023-01-10 09:50:00 +01:00

test-exception.c

feat: handle SIGBUS / SIGSEGV only when originating from YARA's memory blocks (#2020)

2023-12-08 00:12:05 +01:00

test-macho.c

Fix endianness issues in macho module (#2041)

2024-02-12 15:23:09 +01:00

test-magic.c

test-magic: Update expected strings (#1853) (#1854)

2023-01-03 22:40:39 +01:00

test-math.c

Add test case for math.entropy where input is an empty string.

2024-03-25 10:49:06 +01:00

test-pb.c

Tests: Set top_srcdir variable instead of changing directory (#1466)

2021-03-22 10:33:03 +01:00

test-pe.c

guard against undersized rich header in pe_parse_rich_signature (#2200)

2026-06-01 12:34:37 +02:00

test-re-split.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-rules.c

fix: correct indentation issues (#2133)

2025-01-13 10:12:02 +01:00

test-stack.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

test-string.c

fix error handling in string.to_int() (#1842)

2022-12-30 11:06:34 +01:00

test-version.c

Implement non-blocking API (#1428)

2020-12-24 10:46:09 +01:00

util.c

Fix test cases

2024-01-15 22:31:18 +01:00

util.h

Autoformat test/util.h

2024-01-15 16:34:12 +01:00