Celian G.

Crash in libafl_maps_next when iterating over qemu.mapping

5

**Describe the bug** My fuzzer crash every time a `for map in qemu.mappings() {` is done (in Snapshot helper, QemuMappingsViewer or when I do it in my code) . Same...

ML-KEM repeated public key check during encapsulation

2

The ML-KEM encapsulation function contains two checks on the public key length and modulus. https://github.com/bcgit/bc-java/blob/5ce0d4d4536bcb622c1077a6b9157b02ad8adcc5/core/src/main/java/org/bouncycastle/pqc/crypto/mlkem/MLKEMEngine.java#L289-L300 It does not follow the NIST recommendations [FIPS 203 MODULE-LATTICE-BASED KEY-ENCAPSULATION MECHANISM](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf#subsection.7.2) > ML-KEM.Encaps shall...

Sanitization is performed inside `put_client_binary_file` of server.py to avoid putting files outside of the media directory. However removing once all "../" is not enough (it has to be done recursively...