Files
glib/glib
Philip Withnall 9ae59bd647 gvariant-parser: Speed up maybe_wrapper() by an order of magnitude
This further helps with the potential denial of service problem in
issue #2782 / oss-fuzz#49462 / oss-fuzz#20177.

Instead of allocating a new `GVariant` for each nesting level of
maybe-types, allocate a single `GVariant` and give it the fully-nested
maybe type as its type. This has to be done in serialised form.

This prevents attackers from triggering O(size of container × typedecl
depth) allocations.

This is a follow up to commit 3e313438f1,
and includes a test.

Signed-off-by: Philip Withnall <pwithnall@endlessos.org>
Fixes: #2782
oss-fuzz#20177
oss-fuzz#49462
2022-11-08 16:14:02 +00:00
..
2022-06-27 17:53:25 -04:00
2022-05-23 09:19:45 -04:00
2022-06-29 16:05:09 +02:00
2022-06-23 10:47:22 +01:00
2022-06-23 10:47:22 +01:00
2022-06-23 10:47:22 +01:00
2020-11-17 15:50:07 +00:00
2018-01-04 22:19:30 +01:00
2022-07-25 22:30:22 +01:00
2021-09-21 09:41:29 +00:00
2021-11-18 14:32:09 +00:00
2022-09-15 03:43:04 +02:00