Valerie Snyder
4924f2f4dc
Harden HFS+ resource bounds checks
...
Compressed HFS+ resource parsing accumulated resource instance counts
with int arithmetic before seeking to the selected reference entry. A
crafted resource map could overflow the index or produce an unchecked
seek target.
Track the instance index and reference-entry offset in uint64_t,
reject offsets outside the resource fork, and widen catalog key
padding before it feeds record bounds checks.
CLAM-2989
2026-07-01 20:05:01 -04:00
..
2026-07-01 20:05:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 18:43:46 -04:00
2026-06-05 13:33:58 -04:00
2026-06-05 13:33:58 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-10 17:24:25 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-06-22 10:53:27 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-22 10:53:27 -04:00
2026-06-22 10:53:27 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-16 17:51:53 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-08 14:41:59 -04:00
2026-03-07 14:18:17 -05:00
2026-06-16 17:53:01 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-06-08 13:07:43 -04:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:01 -04:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-08 13:07:43 -04:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:00 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 15:08:11 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-07-01 20:05:00 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-22 10:53:27 -04:00
2026-06-22 10:53:27 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-06-29 15:56:14 -04:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00
2026-03-07 14:18:17 -05:00