Search found 3 matches

by Haoxin Tu
Wed Dec 10, 2025 10:59 am
Forum: wimlib discussion
Topic: [Out-of-bounds read] when avl-tree nodes are allocated in specific addresses
Replies: 4
Views: 4453

Re: [Out-of-bounds read] when avl-tree nodes are allocated in specific addresses

Thanks. Note that this issue can also be reproduced without packing structs.

For example, this can be easily achieved using pointer arithmetic and type casting.
In the current implementation of avl_tree_insert (and other relevant APIs), the induced undefined behavior caused by passing an unaligned ...
by Haoxin Tu
Mon Dec 08, 2025 8:45 am
Forum: wimlib discussion
Topic: [Out-of-bounds read] when avl-tree nodes are allocated in specific addresses
Replies: 4
Views: 4453

Re: [Out-of-bounds read] when avl-tree nodes are allocated in specific addresses

Thanks for your reply.

We agree that the current AVL implementation in wimlib may not exhibit this issue under standard allocation, assuming that avl_tree_node has 4-byte natural alignment.

However, our concern is not with current usage, but with assumptions that are not enforced:
There is no ...
by Haoxin Tu
Fri Nov 14, 2025 2:40 pm
Forum: wimlib discussion
Topic: [Out-of-bounds read] when avl-tree nodes are allocated in specific addresses
Replies: 4
Views: 4453

[Out-of-bounds read] when avl-tree nodes are allocated in specific addresses

Dear developers,

We found an issue in the implementation of avl-tree in the wimlib library. Please kindly check the following details.

#### Reproducing Instructions

* The test driver (native_run.c) is as follows:


#include <stdlib.h>
#include <stdint.h>
#include <stdio.h>
#include "wimlib ...