decompress: add optional -fbounds-safety annotations for ZSTD_inBuffer/outBuffer - #4783
decompress: add optional -fbounds-safety annotations for ZSTD_inBuffer/outBuffer#4783LaptopsPlural wants to merge 1 commit into
Conversation
…r/outBuffer Introduce inert ZSTD_SIZED_BY*_ macros (OFF by default) and annotate the streaming buffer structs used by ZSTD_decompressStream. Capacity-first assign in ZSTD_decompressStream_simpleArgs. Default builds unchanged; ENABLE_FBOUNDS_SAFETY / ZSTD_ENABLE_FBOUNDS_SAFETY opt-in for experimental Clang toolchains.
|
Hi @LaptopsPlural! Thank you for your pull request and welcome to our community. Action RequiredIn order to merge any pull request (code, docs, etc.), we require contributors to sign our Contributor License Agreement, and we don't seem to have one on file for you. ProcessIn order for us to review and merge your suggested changes, please sign at https://code.facebook.com/cla. If you are contributing on behalf of someone else (eg your employer), the individual CLA may not be sufficient and your employer may need to sign the corporate CLA. Once the CLA is signed, our tooling will perform checks and validations. Afterwards, the pull request will be tagged with If you have received this in error or have any questions, please contact us at cla@meta.com. Thanks! |
|
Thank you for signing our Contributor License Agreement. We can now accept your code for this (and any) Meta Open Source project. Thanks! |
b7bc7e8 to
02a330b
Compare
Summary
Secure-by-design memory-safety hardening. Annotates streaming
ZSTD_inBuffer/ZSTD_outBufferwith optional Clang-fbounds-safety/ sized-by-style macros. Default builds unchanged (opt-in OFF).Contributor: Jeff Bindel via
LaptopsPlural. Not a vulnerability PoC.Test plan