Skip to content

fix: prevent overflow and misaligned read in build-id parsing#567

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
DataDog:mainfrom
edznux-dd:fix/buildid-overflow
Jun 2, 2026
Merged

fix: prevent overflow and misaligned read in build-id parsing#567
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
DataDog:mainfrom
edznux-dd:fix/buildid-overflow

Conversation

@edznux-dd

Copy link
Copy Markdown
Collaborator

What does this PR do?:

This PR fixes an overflow and misaligned read in build-id parsing.
These issues where found by running the fuzz harnesses.

Motivation:

Fix overflow and UB!

Additional Notes:

How to test the change?:

For Datadog employees:

  • If this PR touches code that signs or publishes builds or packages, or handles
    credentials of any kind, I've requested a review from @DataDog/security-design-and-guidance.
  • This PR doesn't touch any of that.
  • JIRA: [JIRA-XXXX]

Unsure? Have a question? Request a review!

@edznux-dd edznux-dd requested a review from a team as a code owner June 1, 2026 11:44
@datadog-datadog-prod-us1-2

datadog-datadog-prod-us1-2 Bot commented Jun 1, 2026

Copy link
Copy Markdown

Pipelines

Fix all issues with BitsAI

⚠️ Warnings

🚦 2 Pipeline jobs failed

CI Run | summarize-tests   View in Datadog   GitHub Actions

🛟 This job is unlikely to succeed on retry. Please review your pipeline configuration. Missing required environment variables. Ensure 'id-token: write' is set in your workflow permissions.

Code Quality Checks | scan-build   View in Datadog   GitHub Actions

🛟 This job is unlikely to succeed on retry. Please review your pipeline configuration. Missing required environment variables; have you set 'id-token: write' in your workflow permissions?

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 278bb8c | Docs | Datadog PR Page | Give us feedback!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants