RDKB-65595 JST (Generic) Security Fuzzing Report Fixes - #22

Open

pavankumar464 wants to merge 12 commits into

bug/securityFixes

Commits on Jun 15, 2026

added a strlen guard before the memcmp to avoid reading past the end of a short string
pavankumar464
committed
a1a0262
Check `ftell` and `fseek`'s return values
pavankumar464
committed
2d4ad29
Added allocation failure check for `session_id`.
pavankumar464
committed
bb8b581
In `do_exec()`, removed shell-based execution and replaced it with a safe process flow.
pavankumar464
committed
da27d8a
Removed unsafe call `strtok()` and replaced with non-mutating parsing.
pavankumar464
committed
e011454
Tightened session-cookie validation in `session_start()` to prevent bypass/hijack paths:
pavankumar464
committed
030d6b0
Copilot Suggestion
pavankumar464
committed
621952c
Copilot Suggestion Harden read_file size handling: validate ftell range and guard size+1 overflow
pavankumar464
committed
939fce1