mirror of
https://github.com/jamesstringer90/appsandbox.git
synced 2026-10-22 11:03:15 -05:00
James Stringer
8cda2fe452
- C1/C2/H7/H8/H9 engine/squashfs.c: validate block_size (non-zero, power of two, == 1<<block_log, <= 1 MiB); bound walk_directory to the dir stream; bound the inode block_sizes[] list and each per-block write to the output buffer. - C6/H6 engine/ext4.c: cap inodes_per_group at BLOCK_SIZE*8 and size the inode table by whole blocks so the bitmap/table buffers can't overrun. - C7 + M8-sibling iso-patch.c: bound qcow2 l1_size (reject under/oversize, avoid 32-bit length overflow) and propagate IStream::Read failures. - H10/H11 prefetch_build_deps.c: reject an over-long Filename and clamp WriteFile lengths derived from snprintf return values. - L17 prefetch_wsl_deps.c: route download/extract/copy failures through a cleanup label that removes the unique temp directory. - M10/M11 ubuntu_vhdx.c: abort (don't finalize a partial VHDX) when the squashfs walk reports errors; stop and join workers if a thread fails to start so they can't touch the freed stack-local pipeline.