firedancer

firedancer copied to clipboard

[util] Improve validation in MAP_(remove)

1

`map_remove` doesn't validate that `entry` (still) is a valid entry in the map. Removing an entry twice can lead to an underflow of `key_cnt` and passing an invalid entry can...

0x0ece

In fd_mux_tile (src/disco/mux/fd_mux.c), it appears a compromised tile could cause an out-of-bounds read in another tile (e.g. if you achieved remote code execution the quic tile, you may be able...

0x0ece