Cross-border access?
QiAnXinCodeSafe opened this issue · 1 comments
QiAnXinCodeSafe commented
Hi all,
This is Qianxin CodeSafe Team, we found a suspicious issue, at
zstd/lib/compress/zstd_compress_internal.h
Line 720 in 9215de5
where 'repCode' is initialized to 4294967295,and
zstd/lib/compress/zstd_compress_internal.h
Line 722 in 9215de5
In the statement "rep[repCode]", the access to memory exceeded the upper limit of the memory block, causing an out-of-bounds access
Cyan4973 commented
where 'repCode' is initialized to 4294967295,and
For that outcome to happen, it would require offbase == 0
.
This is not possible. offbase
is always >= 1
.
This condition is even asserted within the macro.