Stack buffer overflow during obj/filter/filter_test execution

Sergey L sergeylobanov87nn at gmail.com
Fri Aug 22 21:31:32 CEST 2025


A similar problem was also found in another function ip4_getbit():
during filter_test execution pos is greater than 31: (pos=32,33,34) so
_I(a) >> (31 - pos) becomes UB

This issue has been found by UBSAN.


More information about the Bird-users mailing list