Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent offset wrapping in fd_pread #258

Merged
merged 1 commit into from
Apr 18, 2024

Conversation

yagehu
Copy link
Contributor

@yagehu yagehu commented Apr 16, 2024

This commit inserts a bounds check in fd_pread for the offset parameter. This is necessary because an implicit unsigned-to-signed integer conversion is performed when uv_fs_read is called. Such a conversion results in implementation-defined behavior. One such behavior is the offset wrapping.

fixes #257

This commit inserts a bounds check in `fd_pread` for the `offset`
parameter.  This is necessary because an implicit unsigned-to-signed
integer conversion is performed when `uv_fs_read` is called.  Such a
conversion results in implementation-defined behavior.  One such
behavior is the offset wrapping.

fixes nodejs#257
Copy link
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@guybedford guybedford merged commit d420a05 into nodejs:main Apr 18, 2024
7 checks passed
@yagehu yagehu deleted the yagehu/pread-offset branch June 3, 2024 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

fd_pread with a large offset causes implementation-defined behavior
3 participants