]> git.djapps.eu Git - pkg/ggml/sources/llama.cpp/commit
jinja : fix heap OOB read in value equality comparison (#20782)
authorRuikai Peng <redacted>
Fri, 20 Mar 2026 06:15:17 +0000 (14:15 +0800)
committerGitHub <redacted>
Fri, 20 Mar 2026 06:15:17 +0000 (07:15 +0100)
commit21c804521479c750bdf6d26506964ab3aa207481
tree730201d6bb469d97b9d9946780236ae872ee8d68
parentc46583b86bed573c4ff30685dae59874f124e664
jinja : fix heap OOB read in value equality comparison (#20782)

Address GHSA-q9j6-4hhc-rq9p and GHSA-2q4c-9gq5-5vfp.

The three-iterator overload of std::equal in value_array_t::equivalent()
and value_object_t::equivalent() reads past the end of the shorter
container when comparing arrays or objects of different lengths.

Use the four-iterator overload (C++14) which checks both range lengths.

Found-by: Pwno
common/jinja/value.h