Skip to content

v1.5.0

Latest

Choose a tag to compare

@khanaffan khanaffan released this 20 May 15:17

v1.5.0

πŸ”΄ Security Fixes

  • Fix critical integer overflow in MAP32/MAP16 validation (C API) β€” count*2 could wrap to zero for counts β‰₯ 0x80000000, bypassing validation of map elements.
  • Fix std::bad_alloc crash in C++ Blob API β€” oversized MAP32/ARRAY32 counts could trigger unbounded vector allocations. Added plausibility checks.

⬆️ SQLite Update

  • Bundled SQLite updated from 3.51.3 β†’ 3.53.1 (latest stable, May 2026)

πŸ§ͺ Testing Improvements

  • 8 new edge-case tests for overflow boundary values on MAP32 and ARRAY32
  • 4 new fuzz corpus binary files targeting arithmetic overflow scenarios

βœ… Full test suite passes (16/16)