BFlat b9ca099903 More format parsers keep to their declared lengths and refuse impossible values (#722) ...

Replays #688 and #690–#715. DEX, Java, SQLite, Android, ZIP, ASAR, file system, PyInstaller, JSON config and packet parsers keep to their declared lengths and refuse impossible values.

Co-authored-by: Afloat <132809511+Afloat16@users.noreply.github.com>

2026-11-04 01:43:07 +07:00

..

android_string_pool_bounds.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

asar_header_bounds.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

base64_validation.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

bun_text_encoding.rs

Bun text assets report their stored UTF-16LE encoding (R3.11) (#435)

2026-11-02 23:41:30 +07:00

cpio_checksum.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

cpio_crc_scan_limits.rs

Bound CPIO checksum work across firmware probes (#683)

2026-11-04 00:33:08 +07:00

cramfs_block_lengths.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

der_oid_validation.rs

Exercise the unterminated DER OID guard (#674)

2026-11-03 22:54:14 +07:00

dex_array_widths.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

dex_invoke_registers.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

dex_signed_leb128.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

ext_missing_blocks.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

ext_sparse_indirect.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

java_invoke_operands.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

java_wide_opcodes.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

jffs2_unrecovered_size.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

modified_utf8_validation.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

plist_marker_widths.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

plist_object_bounds.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

program_facts.rs

Craft Anything

2026-10-31 10:52:14 -04:00

pyz_module_bounds.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_jsonc_comment_only.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_jsonc_duplicate_removal.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_pcapng_framing.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_tcp_dns_framing.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_tcp_header_length.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_tls_bounds.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

regression_udp_length.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

romfs_root_directory.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

sourcemap_data_urls.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

sourcemap_section_columns.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

sqlite_overflow_cycles.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

sqlite_page_boundaries.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

sqlite_text_encoding.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

squashfs_extended_directories.rs

Files inside extended SquashFS directories are recovered (R0.5) (#434)

2026-11-02 23:37:59 +07:00

string_offsets.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

tar_gnu_names.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

tar_pax_size.rs

Format parsers refuse or flag input they used to half-read (#652)

2026-11-03 20:29:18 +07:00

zip64_extra_boundaries.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

zip_decoded_size.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00

zip_stored_cap.rs

More format parsers keep to their declared lengths and refuse impossible values (#722)

2026-11-04 01:43:07 +07:00