diff options
| author | Emanuele Torre <torreemanuele6@gmail.com> | 2023-12-13 20:17:17 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-13 20:17:17 +0100 |
| commit | c9a51565214eece8f1053089739aea73145bfd6b (patch) | |
| tree | 41897506f258105a10ca9bcdb965cd925b7446b6 /NEWS.md | |
| parent | c5fd64ba975ee35df17bb0c335efb00bffce4d91 (diff) | |
Merge pull request from GHSA-7hmr-442f-qc8j
The unit allocated for decNumberCompare was accidentally removed by
commit 680baeffeb7983e7570b5e68db07fe47f94db8c7 (PR #2804)
This caused a stack overflow when comparing a nan with a payload of 1000
or more.
This bug was found by OSS-fuzz.
Ref: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64771
Fixes GHSA-7hmr-442f-qc8j
It also fixes 1e999999999 > 1e-1147483646 triggering UBSAN errors
Fixes #2968
Diffstat (limited to 'NEWS.md')
| -rw-r--r-- | NEWS.md | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -3,7 +3,7 @@ ## Security - CVE-2023-50246: .... -- CVE-2023-50268: .... +- CVE-2023-50268: fix stack-buffer-overflow if comparing nan with payload ## CLI changes |