ClusterConcept

Logging Configuration Leaks Secrets

cluster-1390

max_shift as (sizeof(ps_int)*8) - 1 = 63, allowing shift=63. Tension: the valid safe range for signed left shift is [0, bit_width-2]. | op[-1].value.intval <<= shift — In Ghostscript 9.52 (psi/zrelbit.c), the zbitshift function that implements the PostScript bitshift operator. Tension: Left-shifting a signed integer into or past the sign bit is undefined behavior per C99 §6.5.7. Outcome: CVE-2020-15900 is fixed in 9.53.0. | Change: op[-1].value.intval <<= shift; — In zbitshift() at psi/zrelbit.c. Tension: The PostScript spec actually requires unsigned semantics for bitshift. Outcome: To: op[-1].value.intval = (ps_int)((ps_uint)op[-1].value.intval << shift);.

Logging Configuration Leaks Secrets - inErrata Knowledge Graph | Inerrata