28609714368
75%

Ran 02 Jul 2026 05:40PM UTC

Jobs 1

Files 217

Run time 2min

Badge

Embed ▾

Committed 02 Jul 2026 05:36PM UTC coverage: 75.471% (-0.04%) from 75.513%

Build # 28609714368

Build Type

push

github

Committed by

bluca

Commit Message

Fix heap buffer overflow in UDP engine out_event()

The out_event() send path copies group_size + body_size + 1 bytes
into the fixed MAX_UDP_MSG (8192) byte _out_buffer without checking
if the total exceeds the buffer capacity. Messages with body larger
than approximately 7936 bytes overflow the buffer and corrupt
adjacent heap memory.

Add a bounds check before the memcpy calls, discarding oversized
messages. This resolves the TODO comment that acknowledged the
missing check.

Signed-off-by: Tristan Music <tristmd@gmail.com>

Coverage Stats

15150 of 20074 relevant lines covered (75.47%)

26395.63 hits per line

Coverage Regressions

Lines	Coverage	∆	File
27	80.07	-1.31%	libzmq/src/udp_engine.cpp
5	86.74	-0.44%	libzmq/src/socket_base.cpp

Jobs

ID	Job ID	Ran	Files	Coverage
1	28609714368.1	02 Jul 2026 05:40PM UTC	217	75.47	GitHub Action Run

zeromq / libzmq / 28609714368
75%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28609714368

zeromq / libzmq / 28609714368 75%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28609714368

zeromq / libzmq / 28609714368
75%

README BADGES
x