| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ipfs/go-bitfield | < 1.1.0 | 1.1.0 |
| go-bitfield | < 1.1.0 | 1.1.0 |
When feeding untrusted user input into the size parameter of NewBitfield and FromBytes functions, an attacker can trigger panics.
This happen when the size is a not a multiple of 8 or is negative.
There were already a note in the NewBitfield documentation:
Panics if size is not a multiple of 8.
But it incomplete and missing from FromBytes's documentation.
This has been replaced by returning an (Bitfield, error) and returning a non nil error if the size is wrong.
size%8 == 0 && size >= 0 yourself before calling NewBitfield or FromBytesRunning one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free