cobot_developer

### Description We encountered a SIGABRT (Assertion Failure) in wasm-dis. The crash occurs within wasm::HeapType::getStruct when disassembling a malformed WebAssembly binary. The assertion isStruct() fails, indicating that the parser encountered...

### Description We encountered a SIGABRT (Assertion Failure) in wasm-opt. The crash triggers when parsing a malformed WebAssembly binary containing a br_on instruction. The assertion isRef() fails within wasm::Type::getHeapType(), which...

[Bug] Assertion failed type.IsReferenceWithIndex() in wabt::convertRefNullToRef

1

### Description We encountered a SIGABRT (Assertion Failure) in wasm-interp. The crash occurs within the type checker logic when processing a malformed WebAssembly binary using the --enable-all flag. The assertion...

[Bug] Assertion failed exp_stack.size() >= nargs in wabt::AST::InsertNode

1

### Description We encountered a SIGABRT (Assertion Failure) in wasm-decompile. The crash occurs within wabt::AST::InsertNode when attempting to decompile a malformed WebAssembly binary. The assertion exp_stack.size() >= nargs fails, indicating...

[Bug] Assertion failed false in wabt::Decompiler::DecompileExpr

1

### Description We encountered a SIGABRT (Assertion Failure) in wasm-decompile. The crash occurs within wabt::Decompiler::DecompileExpr when attempting to process a malformed WebAssembly binary. The assertion false fails at decompiler.cc:414. This...

[Bug] Assertion failed is_name() in wabt::Var::name()

1

### Description We encountered a SIGABRT (Assertion Failure) in wasm-decompile. The crash occurs within wabt::Var::name() when decompiling a malformed WebAssembly binary. The assertion is_name() fails, indicating that the decompiler attempts...

[Bug] Assertion failed end >= start in wabt::AST::Construct

1

### Description We encountered a SIGABRT (Assertion Failure) in wasm-decompile. The crash occurs within wabt::AST::Construct when attempting to decompile a malformed WebAssembly binary. The assertion end >= start fails, indicating...

LEDE/OpenWrt oseama 工具中发现的栈缓冲区下溢漏洞

2

### 详细叙述 ### 概要 在 LEDE/OpenWrt 的 oseama（Seama 固件镜像处理工具）中发现两个栈缓冲区下溢（stack buffer underflow）漏洞。 当解析 Seama 文件的 metasize 字段为 0 时，代码计算 metasize - 1 并写入 buf[metasize - 1]，导致对 buf 之前的栈内存写入。 AddressSanitizer 在多个输入样本下稳定触发崩溃。 攻击者可利用该缺陷破坏栈上的关键数据，理论上存在任意代码执行风险，且漏洞易于触发且可复现。...

### Summary When using whisper-cli to read audio files, AddressSanitizer reports an attempt to free memory that was not allocated on the heap. The invalid free occurs inside read_audio_data when...