Title: fix(zstd): bounds-check VarBin length prefixes · dfa1/vortex-java@adc445e · GitHub
Open Graph Title: fix(zstd): bounds-check VarBin length prefixes · dfa1/vortex-java@adc445e
X Title: fix(zstd): bounds-check VarBin length prefixes · dfa1/vortex-java@adc445e
Description: Vortex columnar format, in pure Java (zero-copy, FFM, no JNI, no Unsafe) - fix(zstd): bounds-check VarBin length prefixes · dfa1/vortex-java@adc445e
Open Graph Description: buildVarBin and buildScatteredVarBin read a 4-byte length prefix and advanced the cursor by it with no validation. A crafted decompressed payload with a negative or oversized length overran the seg...
X Description: buildVarBin and buildScatteredVarBin read a 4-byte length prefix and advanced the cursor by it with no validation. A crafted decompressed payload with a negative or oversized length overran the seg...
Opengraph URL: /dfa1/vortex-java/commit/adc445e8517253161c86065bd5304a88946a5ecb
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/commit/:name(/*path) |
| route-controller | commit |
| route-action | show |
| fetch-nonce | v2:261f0973-3b37-27a7-4736-1e0e723aeb82 |
| current-catalog-service-hash | f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb |
| request-id | A448:34D869:8DD050:C8BCA4:6A4D1A88 |
| html-safe-nonce | e16b8b314515b1fd4c67257f66e7ccfd9f03de5db57a2a341910a6c377699814 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBNDQ4OjM0RDg2OTo4REQwNTA6QzhCQ0E0OjZBNEQxQTg4IiwidmlzaXRvcl9pZCI6IjE4Nzc2NzU1NzgwNzAyMTEyMDgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 610aaf9999f27abd0b07680a1300f2f8fc10f5bad92fd2af36e41ad5212cbd63 |
| hovercard-subject-tag | repository:1249412947 |
| github-keyboard-shortcuts | repository,commits,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/dfa1/vortex-java/commit/adc445e8 |
| twitter:image | https://opengraph.githubassets.com/3c9ecbf55235e9a9f1065e4bb6e62d6352eeb90af0bf6fe46727b036d1fe2ef1/dfa1/vortex-java/commit/adc445e8517253161c86065bd5304a88946a5ecb |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/3c9ecbf55235e9a9f1065e4bb6e62d6352eeb90af0bf6fe46727b036d1fe2ef1/dfa1/vortex-java/commit/adc445e8517253161c86065bd5304a88946a5ecb |
| og:image:alt | buildVarBin and buildScatteredVarBin read a 4-byte length prefix and advanced the cursor by it with no validation. A crafted decompressed payload with a negative or oversized length overran the seg... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:updated_time | 1782500036 |
| hostname | github.com |
| expected-hostname | github.com |
| None | bcb4661e6fb4fe8b394c51ea02ccdb2236d40dc59afc75a3bbba50bf6517134c |
| turbo-cache-control | no-cache |
| go-import | github.com/dfa1/vortex-java git https://github.com/dfa1/vortex-java.git |
| octolytics-dimension-user_id | 5798698 |
| octolytics-dimension-user_login | dfa1 |
| octolytics-dimension-repository_id | 1249412947 |
| octolytics-dimension-repository_nwo | dfa1/vortex-java |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1249412947 |
| octolytics-dimension-repository_network_root_nwo | dfa1/vortex-java |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | fb70bd3c4b2bec429781b65419e912c66e2d5581 |
| ui-target | canary-2 |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width