diff options
| author |  Nikias Bassen | 2026-01-21 18:22:13 +0100 |
|---|---|---|
| committer | Nikias Bassen | 2026-01-21 18:22:13 +0100 |
| commit | 80c2fe807308475d183ae62cc05766f3caee0463 (patch) | |
| tree | 402447907966a436f6e1f490d842f66b26ec5d91 /fuzz/xplist-crashes/crash-94276cf69a50e78dd6cdf079c208cb80f357cd33 | |
| parent | f06c4c6b6cf29c9e53637731fedd86a6e99e9882 (diff) | |
| download | libplist-80c2fe807308475d183ae62cc05766f3caee0463.tar.gz libplist-80c2fe807308475d183ae62cc05766f3caee0463.tar.bz2 | |
bplist: Fix UTF-8 to UTF-16 decoding and enforce strict validation
- Treat input as unsigned bytes
- Correct UTF-8 bit decoding for 2/3/4-byte sequences
- Add overlong, surrogate, and range checks
- Enforce lead/continuation byte constraints
This addresses issue #283.
Credit to @hgarrereyn for reporting.
Diffstat (limited to 'fuzz/xplist-crashes/crash-94276cf69a50e78dd6cdf079c208cb80f357cd33')
0 files changed, 0 insertions, 0 deletions