New issue
Advanced search Search tips

Issue 612374 link

Starred by 2 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Mojo core: use safe numerics library for input validation

Project Member Reported by roc...@chromium.org, May 17 2016

Issue description

We do a lot of pointer arithmetic to check sanity of untrusted message inputs. //base/numeric can make us safer and we should use it.
 

Comment 1 by och...@chromium.org, May 17 2016

Cc: tsepez@chromium.org jsc...@chromium.org
+jschuh, tsepez who would probably be interested in seeing this happen.

Comment 2 by roc...@chromium.org, May 29 2017

Cc: roc...@chromium.org
Components: Internals>Mojo
Owner: ----
Status: Available (was: Assigned)
Moving to available bug set so that someone can eventually re-audit the code and figure out what's left to convert, but I'll also note that as I'm refactoring many of the internals I am also switching input validation code to use safe numerics where appropriate.
Project Member

Comment 3 by sheriffbot@chromium.org, May 29 2018

Labels: Hotlist-Recharge-Cold
Status: Untriaged (was: Available)
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: -roc...@chromium.org rockot@google.com
Components: -Internals>Mojo Internals>Mojo>Core
Status: Available (was: Untriaged)
Triaging, still valid. We have more code using safe numerics now, but there's more we could do.
Summary: Mojo core: use safe numerics library for input validation (was: [mojo-edk] Use safe numerics library for input validation)

Sign in to add a comment