| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-07-05 | clamped copied length to n | HiFiPhile | |
| Signed-off-by: HiFiPhile <[email protected]> | |||
| 2026-07-03 | add ncm receive-path fuzz harness with out-of-bounds seed | Javid Khan | |
| folds the reproducer for the recv_validate_datagram bound into a small self-contained fuzz target. it feeds a raw ntb straight into the validator (the driver is pulled in so the static function is reachable) and ships the crafted 64-byte ntb as a seed. the seed trips an asan heap-buffer-overflow against the unpatched driver and is rejected cleanly with the wLength bound in place. | |||
