Security review of xclbinutil - #9968

Merged

stsoe merged 7 commits into

Xilinx:masterfrom

Aug 6, 2026

Commits on Aug 6, 2026

Fix CWE-125 heap OOB from unterminated fixed-size string fields in section parsers

stsoe
and
claude
committed
186522d
Fix CWE-125 heap OOB from unchecked wire-format array offsets in SectionAIEPartition

stsoe
and
claude
committed
4d71932
Fix CWE-190/191 integer overflow and underflow in xclbinutil section parsers

stsoe
and
claude
committed
dd2237b
Fix CWE-190 dead guard and silent truncation in Section.cxx readXclBinBinary

stsoe
and
claude
committed
6c99440
Fix logic bugs: missing empty check on interfaces vector and unchecked stream reads

stsoe
and
claude
committed
0571479
Fix CWE-78 command injection in legacy popen exec() path in XclBinUtilities

stsoe
and
claude
committed
5b93ef5
Review fixes

stsoe
and
claude
committed
5cb3cc4