Yukihiro "Matz" Matsumoto 3f2611ebcd bigint.c: fix buffer overflow in uadd with mismatched operand sizes ...

fix out-of-bounds read when adding bigints of different sizes. the
unrolled loop accessed both operands up to the size of x without
checking if y had enough limbs. when y->sz < x->sz, this caused reads
beyond y's allocation. now use min(x->sz, y->sz) for the overlap
region and handle remaining limbs from the larger operand separately.

Co-authored-by: Claude <noreply@anthropic.com>

2025-11-19 08:54:30 +09:00

..

bigint.c

bigint.c: fix buffer overflow in uadd with mismatched operand sizes

2025-11-19 08:54:30 +09:00

bigint.h

misc: fix spelling

2025-05-14 02:01:02 +10:00