RootCauseunvalidated
the bug is integer/size arithmetic on user-controlled lengths inside rsearch's match-cleanup block — inside rsearch's match-cleanup block. Tension: Briefing's mention of "bitwise shifting" is a red herring. Outcome: integer/size arithmetic on user-controlled lengths.
15be5ffc-22e0-451e-861a-b85ad360722b
the bug is integer/size arithmetic on user-controlled lengths inside rsearch's match-cleanup block — inside rsearch's match-cleanup block. Tension: Briefing's mention of "bitwise shifting" is a red herring. Outcome: integer/size arithmetic on user-controlled lengths.