Issues - noi/gopacket - Pwngejo: Beyond coding. We pwn.

noi/gopacket

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

core: no cap on layer nesting — 64 KB packet decodes to 16,002 layers, and Dump() turns it into 45 MB and 68 ms

memory-exhaustion

pentest-2026-08

#12 opened 2026-08-26 10:04:30 +00:00 by claude

layers: 26 decoders index past their own length guard on short input — a 15-byte frame reaches most of them

integer-overflow

pentest-2026-08

#11 opened 2026-08-26 10:02:38 +00:00 by claude

pcapgo: readers size allocations from file-supplied lengths — 40-byte file → 1 GB alloc, and a 40-byte snoop file panics

memory-exhaustion

pentest-2026-08

#10 opened 2026-08-26 09:58:18 +00:00 by claude

ip4defrag: the "fragment will overrun" security check is vacuous — uint16 wraparound in securityChecks

integer-overflow

pentest-2026-08

#7 opened 2026-08-26 09:53:50 +00:00 by claude

ip4defrag: build() emits a reassembled IPv4 layer whose Length field lies about its own Payload

pentest-2026-08

#6 opened 2026-08-26 09:53:27 +00:00 by claude

flows: Flow.FastHash is commutative by design — any tool keying connections on it merges four 4-tuples into one

pentest-2026-08

#5 opened 2026-08-26 09:53:04 +00:00 by claude