Protobuf Team Bot
04cd636f71
Auto-generate files after cl/925466128
2026-06-02 18:18:37 +00:00
Protobuf Team Bot
9823e870ae
Auto-generate files after cl/923465700
2026-05-29 17:09:28 +00:00
Protobuf Team Bot
b387c2d322
Auto-generate files after cl/923032296
2026-05-28 23:26:17 +00:00
Protobuf Team Bot
bce637e80e
Auto-generate files after cl/922907524
2026-05-28 19:31:10 +00:00
Protobuf Team Bot
4576ba1c2f
Auto-generate files after cl/922881912
2026-05-28 18:40:30 +00:00
Protobuf Team Bot
9e51162c47
Auto-generate files after cl/922801889
2026-05-28 16:15:10 +00:00
Protobuf Team Bot
63f5338a88
Auto-generate files after cl/922299549
2026-05-27 20:13:15 +00:00
Protobuf Team Bot
5c88a319da
Auto-generate files after cl/921771119
2026-05-27 00:22:52 +00:00
Protobuf Team Bot
67c828b549
Auto-generate files after cl/921438940
2026-05-26 14:01:41 +00:00
Protobuf Team Bot
4376cba55d
Auto-generate files after cl/920402652
2026-05-24 06:24:56 +00:00
Protobuf Team Bot
ce7b8f343a
Auto-generate files after cl/919938888
2026-05-23 00:51:46 +00:00
Protobuf Team Bot
f9351a9862
Auto-generate files after cl/919794585
2026-05-22 19:22:21 +00:00
Protobuf Team Bot
64f103bbfd
Auto-generate files after cl/919258499
2026-05-21 21:44:04 +00:00
Protobuf Team Bot
7d0297e6c1
Auto-generate files after cl/919171015
2026-05-21 18:55:42 +00:00
Protobuf Team Bot
4fcadf1478
Auto-generate files after cl/919139292
2026-05-21 18:02:10 +00:00
Protobuf Team Bot
382f6a7eaf
Auto-generate files after cl/918559519
2026-05-20 18:42:36 +00:00
Protobuf Team Bot
4327ee4402
Auto-generate files after cl/918507979
2026-05-20 17:18:46 +00:00
Protobuf Team Bot
46a1d94e94
Auto-generate files after cl/918068827
2026-05-19 22:59:14 +00:00
Protobuf Team Bot
08a693e5df
Auto-generate files after cl/917977023
2026-05-19 20:03:42 +00:00
vhulto
f04511c9c2
Ruby: clamp len in RepeatedField#[beg, len] to fix out-of-bounds read ( #27191 )
...
## Bug
`RepeatedField_subarray` (called from `RepeatedField_index` 2-arg form,
`repeated_field.c:270`) loops `i` from `beg` to `beg + len` and calls
`upb_Array_Get(arr, i)` for every value. `upb_Array_Get` only has a
debug-only `UPB_ASSERT` (ruby-upb.c:7182); release builds therefore
perform `memcpy(&ret, data + (i << lg2), 1 << lg2)` for arbitrary `i`,
reading the upb arena out of bounds.
Result: silent heap info disclosure for numeric fields (`repeated int32`
returns adjacent arena bytes as Ruby integers), segfault for
`repeated string`/`message`. Confirmed with ASAN (`use-after-poison`,
READ size 4 at `RepeatedField_subarray:188`).
## Fix
Clamp `len` to `size - beg` in `RepeatedField_subarray`, matching Ruby
`Array#[beg, len]` semantics. Also reject negative `len` and fix the
`rb_ary_new2(size)` capacity hint to use the now-known `len`.
Closes #27191
COPYBARA_INTEGRATE_REVIEW=https://github.com/protocolbuffers/protobuf/pull/27191 from vhullto:fix/repeated-field-subarray-oob 876202835c
PiperOrigin-RevId: 917251509
2026-05-18 08:40:57 -07:00
Protobuf Team Bot
49b83aba62
Auto-generate files after cl/915664238
2026-05-14 23:15:46 +00:00
Protobuf Team Bot
c228594aa8
Auto-generate files after cl/915391025
2026-05-14 13:20:47 +00:00
Protobuf Team Bot
17f2f1f8c2
Auto-generate files after cl/915179906
2026-05-14 02:50:05 +00:00
Protobuf Team Bot
a7e70a39d8
Auto-generate files after cl/915173388
2026-05-14 02:27:43 +00:00
Protobuf Team Bot
dd7d759adc
Auto-generate files after cl/915160928
2026-05-14 01:34:28 +00:00
Protobuf Team Bot
6aa1de1f65
Auto-generate files after cl/915138600
2026-05-14 00:27:20 +00:00
Protobuf Team Bot
b98d54a528
Auto-generate files after cl/915124636
2026-05-13 23:49:02 +00:00
Protobuf Team Bot
fae4b1f26d
Auto-generate files after PR #27215
2026-05-13 21:28:53 +00:00
Protobuf Team Bot
6da2cd928e
Auto-generate files after cl/914653834
2026-05-13 05:54:01 +00:00
Protobuf Team Bot
8f63c47cb6
Auto-generate files after cl/914485774
2026-05-12 21:51:42 +00:00
Protobuf Team Bot
345df76198
Auto-generate files after cl/914421139
2026-05-12 19:43:17 +00:00
Protobuf Team Bot
f6ce18964a
Auto-generate files after cl/914346686
2026-05-12 17:31:07 +00:00
Protobuf Team Bot
7bb6178325
Auto-generate files after cl/912234452
2026-05-08 00:28:42 +00:00
Protobuf Team Bot
a4bf919c99
Auto-generate files after cl/912205927
2026-05-07 23:21:34 +00:00
Protobuf Team Bot
e8164734b4
Auto-generate files after cl/912111712
2026-05-07 20:12:48 +00:00
Protobuf Team Bot
85bac82e26
Auto-generate files after cl/912048631
2026-05-07 18:12:20 +00:00
Protobuf Team Bot
6aaf82d910
Auto-generate files after cl/911751127
2026-05-07 06:08:32 +00:00
Protobuf Team Bot
71ecafda2f
Auto-generate files after cl/911649882
2026-05-07 01:06:09 +00:00
Protobuf Team Bot
76e74b027c
Auto-generate files after cl/911624420
2026-05-07 00:10:25 +00:00
Protobuf Team Bot
303c731708
Auto-generate files after cl/911111118
2026-05-06 05:43:04 +00:00
Protobuf Team Bot
83617f5f69
Auto-generate files after cl/910940934
2026-05-05 22:26:25 +00:00
Protobuf Team Bot
2b15f7cfae
Auto-generate files after PR #27133
2026-05-05 14:56:28 +00:00
Protobuf Team Bot
c4e2cdfb07
Auto-generate files after cl/910315905
2026-05-04 23:59:00 +00:00
Protobuf Team Bot
06a1003cb9
Auto-generate files after PR #25683
2026-05-04 15:30:16 +00:00
Protobuf Team Bot
b6393d6d78
Auto-generate files after cl/908903898
2026-05-01 21:50:19 +00:00
Protobuf Team Bot
f331eba783
Auto-generate files after cl/908760363
2026-05-01 16:18:50 +00:00
Protobuf Team Bot
be0335d84f
Auto-generate files after cl/908697453
2026-05-01 13:28:24 +00:00
Protobuf Team Bot
a8896e84d6
Auto-generate files after cl/908404027
2026-04-30 22:31:44 +00:00
Protobuf Team Bot
1a92d8c3ac
Auto-generate files after cl/908348263
2026-04-30 20:45:42 +00:00
Protobuf Team Bot
d4ea3dd49c
Auto-generate files after cl/908298171
2026-04-30 19:05:11 +00:00