Yiheng Cao

Results 30 comments of Yiheng Cao

fix the integer overflow

but you can see in the newest version of hiredis, the https://github.com/redis/hiredis/blob/398e16e7cc20545a19f2af2293cc6f04310e6b7a/sds.c#L93C1-L93C78 is added which is similiar to the fix of the [CVE-2021-21309](https://nvd.nist.gov/vuln/detail/CVE-2021-21309), maybe you can fix it? Cause the...

Need confirmation for some unpatched CVE in Curl

@samsinsane Any further confirmation for using the submodule in premake? I've found some other CVEs in the current curl used in premake now like CVE-2020-8231 and CVE-2017-7468. Besides, I also...

Potential OOB vulnerability may happen

So there is no need to fix this vulnerability?

Potential OOB vulnerability may happen

> > So there is no need to fix this vulnerability? > > If vulnerable code is present in the repository it is still not right, even if it is...

Here is a negation overflow in lua

So there is no need to fix this vulnerability?

Here is a negation overflow in lua

> > So there is no need to fix this vulnerability? > > If vulnerable code is present in the repository it is still not right, even if it is...

Integer overflow (leading to stack-based buffer overflow) in embedded lua_struct.c

> Please open a PR for that. Sure, I've already opened, which is https://github.com/nodemcu/nodemcu-firmware/pull/3633 please check it, thank you!

Here is a negation overflow in lua

> Please open a PR for that. Sure, I've already opened, which is https://github.com/nodemcu/nodemcu-firmware/pull/3632, please check it, thank you!

Security Vulnerability - Action Required: XXE vulnerability in the newest version of the gpmall

> 我已经收到您的来信啦 Thanks~ 烦请您验证一下，谢谢~ 如果有必要，我也可以帮忙提交PR，谢谢~

Security Vulnerability - Action Required: XXE vulnerability in the newest version of the tutorials

Hey @rajat-garg , Thank you for your reply about this issue which is detected by our tools. Now I really want to know your thoughts about our tool. When you...