Skip to content

Fix undefined behavior in key_from_id() #129420

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dovydenkovas wants to merge 3 commits into
base: main
Choose a base branch
from
+18 −8
Open

Fix undefined behavior in key_from_id() #129420

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7c918b3
Fix signed type extension_offset check in key_from_id()
dovydenkovas Jun 15, 2026
a2eaa9a
Replace null check with assert in `key_from_id()`
dovydenkovas Jun 15, 2026
8a14df0
Ensure resource id is not null in bundled_resources_get
dovydenkovas Jun 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 18 additions & 8 deletions src/mono/mono/metadata/bundled-resources.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,19 +75,29 @@ bundled_resources_is_known_assembly_extension (const char *ext)

// If a bundled resource has a known assembly extension, we strip the extension from its name
// This ensures that lookups for foo.dll will work even if the assembly is in a webcil container
//
// Arguments:
// * id - Name of the resource, not NULL, null-terminated byte string.
// * buffer - Data to be written at given target address.
// * buffer_len - Length of buffer.
//
// Returns:
// static char * - Pointer to the stripped name of the resource.
//

static char *
key_from_id (const char *id, char *buffer, guint buffer_len)
{
size_t id_length = 0;
size_t extension_offset = -1;
ssize_t extension_offset = -1;
const char *extension = NULL;

if (id){
id_length = strlen (id);
extension = g_memrchr (id, '.', id_length);
if (extension)
extension_offset = extension - id;
}
g_assert (id);
id_length = strlen (id);
extension = g_memrchr (id, '.', id_length);
if (extension)
extension_offset = extension - id;

if (!buffer) {
// Add space for .dll and null terminator
buffer_len = (guint)(id_length + 6);
Expand Down Expand Up @@ -198,7 +208,7 @@ mono_bundled_resources_add (MonoBundledResource **resources_to_bundle, uint32_t
static MonoBundledResource *
bundled_resources_get (const char *id)
{
if (!bundled_resources)
if (!bundled_resources || !id)
return NULL;

char key_buffer[1024];
Expand Down
Loading