Andreas Kling f94deb4afb LibIPC: Use try_dequeue() when decoding IPC::File ...

A malicious peer could send a message declaring an IPC::File parameter
without actually including the file descriptor. This would cause
Queue::dequeue() to crash via VERIFY(!is_empty()).

Use try_dequeue() instead, which returns an error that propagates up
through the decode chain, ultimately disconnecting the misbehaving peer.

2026-01-22 17:38:15 +01:00

1.4 KiB

Raw Blame History

View Raw