From 9667cd5b03614139ac5d127ebefb38a8915b5302 Mon Sep 17 00:00:00 2001 From: Reece Dunham Date: Sat, 18 Apr 2026 17:00:20 -0400 Subject: [PATCH] Fix out of bounds read While working on #54, I found that ASAN flags this line because this function call tries to read 53 bytes of a 50-byte string. That's not right! --- ext/syck/rubyext.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/syck/rubyext.c b/ext/syck/rubyext.c index 09dcf36..7e92009 100644 --- a/ext/syck/rubyext.c +++ b/ext/syck/rubyext.c @@ -770,7 +770,7 @@ rb_syck_bad_anchor_handler(SyckParser *p, char *a) { VALUE anchor_name = rb_str_new2( a ); SyckNode *badanc = syck_new_map( rb_str_new2( "name" ), anchor_name ); - badanc->type_id = syck_strndup( "tag:ruby.yaml.org,2002:object:YAML::Syck::BadAlias", 53 ); + badanc->type_id = syck_strndup( "tag:ruby.yaml.org,2002:object:YAML::Syck::BadAlias", 50 ); return badanc; }