Skip to content

Unchecked file_id from disk causes panic + crafted length causes OOM #1

@consigcody94

Description

@consigcody94

Found via code audit. trigrep-index/src/reader.rs:104. files[file_id as usize] with no bounds check. Also read_posting_list:86 uses disk length for Vec::with_capacity - crafted u32::MAX = 24GB alloc.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions