Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stricter limit on POS/MPOS/TLEN in sam_parse1() #1812

Merged
merged 2 commits into from
Jul 30, 2024

Commits on Jul 29, 2024

  1. Stricter limit on POS/MPOS/TLEN in sam_parse1()

    Help avoid overflow on arithmetic involving POS, MPOS and TLEN
    by limiting values in the SAM parser to fit in 62 bits (or 63
    for TLEN as it's signed).  The new limit is still massively bigger
    than any known reference so it should not cause any problems
    in practice.
    
    Credit to OSS-Fuzz
    Fixes oss-fuzz 68750
    daviesrob committed Jul 29, 2024
    Configuration menu
    Copy the full SHA
    9a4b660 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2024

  1. Stricter limit on POS in vcf_parse()

    Limiting POS to 62 bits helps avoid the risk of signed overflow
    when it's set to a very extreme value.  The maximum is still
    much higher than the length of the longest currently known
    reference.
    daviesrob committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    555802f View commit details
    Browse the repository at this point in the history