Files
appsandbox/tools/iso-patch-mac
James Stringer 503db33307 Harden iso-patch-mac (ARC over-release, resume-sidecar overflow)
- C8  StageEntry stored ARC __strong NSString members in an NSValue (raw byte
      copy, no retain), so ARC over-released them each loop iteration ->
      double-free/UAF in the privileged stage path; mark __unsafe_unretained
      (the source strings outlive the command via the outer autorelease pool).
- L10 resumeDataFromSidecarAt: `raw.length < 8 + n` overflowed for n near
      UINT64_MAX, bypassing the guard and throwing NSRangeException; compare
      with subtraction (`n > raw.length - 8`).
2026-06-03 20:58:30 -04:00
..