New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[KGA-43][KGA-110][KGA-111][KGA-57] fix: check data.length and pendingWordLen #13

Merged

obatirou merged 1 commit into kkrt-labs:main from obatirou:bytearray-deserialization

Nov 25, 2024

Contributor

obatirou commented Nov 20, 2024

code-423n4/2024-09-kakarot-findings#77
code-423n4/2024-09-kakarot-findings#86
code-423n4/2024-09-kakarot-findings#99
code-423n4/2024-09-kakarot-findings#100

notion-workspace bot commented Nov 20, 2024

Incorrect ByteArray can be deserialized

notion-workspace bot commented Nov 20, 2024

Missing Length Verification Between Computed and Actual Data Size Enables Memory Corruption

notion-workspace bot commented Nov 20, 2024

Unchecked Memory Access and Integer Overflow Risks Lead to Arbitrary Memory Corruption

notion-workspace bot commented Nov 20, 2024

Unvalidated Word Alignment and Boundary Checks Allow Memory Corruption Through Misaligned Data Access

obatirou requested a review from enitrat

November 20, 2024 11:49

enitrat previously approved these changes

View reviewed changes


          fix: check data.length and pendingWordLen

f6dbb1e

obatirou dismissed enitrat’s stale review via

f6dbb1e

November 25, 2024 11:32

obatirou force-pushed the bytearray-deserialization branch from 91c3baf to f6dbb1e Compare

November 25, 2024 11:32

enitrat approved these changes

View reviewed changes

obatirou merged commit 876daa0 into kkrt-labs:main

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet