Timeline

Sep 21, 2026:

5:37 PM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

Description changed

5:35 PM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

Summary changed

5:34 PM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

The above fixes in spudec_assemble should be enough to cause …

5:29 PM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

Fix, part 2: Then, also in spudec_assemble, there is a kludge between …

5:22 PM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

OK. I've got a fix. First of all, in spudec_assemble, there is this …

9:35 AM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) updated by wififreedom

spudec_process_control should not read beyond the available data. …

8:48 AM Ticket #2432 (spudec_process_control can read beyond the end of a packet, now with fix!) created by wififreedom

[…] The above loop does not check for end of packet. I have just …