Skip to content

FIX: Validate caller-controlled native buffer sizes - #802

Open
gargsaumya wants to merge 47 commits into
mainfrom
saumya/native-size-validation
Open

FIX: Validate caller-controlled native buffer sizes#802
gargsaumya wants to merge 47 commits into
mainfrom
saumya/native-size-validation

FIX: Address native size validation review feedback

748ceb2
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / devskim succeeded Oct 19, 2026 in 3s

1 new alert

New alerts in code changed by this pull request

  • 1 note

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 6225 in mssql_python/pybind/ddbc_bindings.cpp

See this annotation in the file changed.

Code scanning / devskim

There are a number of conditions in which memcpy can introduce a vulnerability (mismatched buffer sizes, null pointers, etc.). More secure alternitives perform additional validation of the source and destination buffer Note

Problematic C function detected (memcpy)