2 Commits

Author SHA1 Message Date
Jah-yee 6657f2dd4a security: reject ACE with AceSize below minimum header size
When AceSize is less than 8, the fixed 4-byte header plus 4-byte Mask
are not contained in the ACE.  The existing len(data) < aceSize check
passes (len(data) may be >= 8) but later slices like data[4:8] and
data[offset:aceSize] panic with 'slice bounds out of range'.

Fixes #23.
2026-05-05 13:47:21 +08:00
Jacob Paullus 160b6a4280 Initial commit 2026-04-17 14:20:41 -05:00