title: Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb
description: The dag-pb codec can panic when decoding invalid blocks.
problem types: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
affected:
{
vendor: github.com/ipld/go-codec-dagpb
product: github.com/ipld/go-codec-dagpb
collectionURL: https://pkg.go.dev
packageName: github.com/ipld/go-codec-dagpb
versions:
version: 0, lessThan: 1.3.1, status: affected, versionType: semver
programRoutines:
name: DecodeBytes
name: Decode
name: Decoder
name: Unmarshal
defaultStatus: unaffected
}