ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

Christoph Wille bdb4ffaa56 Bound every .resources length against the remaining stream before allocating A .resources file's resource count, type count, name lengths, binary resource lengths and serialized-object lengths all come from the file and were only checked for being non-negative before sizing an allocation. A crafted file can therefore request multi-gigabyte arrays from a few-hundred-byte payload (CWE-789), turning a click on a resource node into an out-of-memory condition. The serialization-format kind was additionally an assert-only check that vanishes in Release builds. Each element of these counts occupies at least one byte in the stream, so a value needing more bytes than remain after the current position cannot be honest. Reject it with the same BadImageFormatException the callers already handle, and promote the format-kind assert into a real check. Assisted-by: Claude:claude-fable-5:Claude Code		3 weeks ago
..
AvaloniaResourcesFileTests.cs	Unpack !AvaloniaResources into per-file resource tree nodes	3 months ago
BitSetTests.cs	…
FileUtilityTests.cs	Run the decompiler test suite on Linux	3 months ago
IntervalTests.cs	…
LongSetTests.cs	…
ResourcesFileTests.cs	Bound every .resources length against the remaining stream before allocating	3 weeks ago
Sha1ForNonSecretPurposesTests.cs	Compute public-key tokens with a managed SHA-1	3 months ago
Win32ResourcesTests.cs	Bound .rsrc resource-tree parsing against crafted input	3 months ago