All issues

Search results

Bug bounty: Power loss can commit a remote transaction while the local chunk directory remains stale

Status: Open.

#746 In Tarsnap/tarsnap;

· mySebbe opened on Aug 11, 2026

Bug Bounty Report — Spiped: Thread Race Condition in spipe/main.c — Threads Not Cancelled Before proto_conn_drop() on events_spin() Failure

Status: Open.

#734 In Tarsnap/tarsnap;

· ChronoNova5678 opened on Jul 24, 2026

**BUG BOUNTY: Integer overflow in crypto_aesctr_stream_pre_wholeblock() when buflen near SIZE_MAX causes wrong branch and potential buffer overflow — libcperciva/crypto/crypto_aesctr_shared.c**

Status: Open.

#733 In Tarsnap/tarsnap;

· ChronoNova5678 opened on Jul 19, 2026

Bug Bounty Report — libcperciva: OOM state corruption in network_ssl_read()/network_ssl_write() (phantom callbacks, assert abort)

Status: Open.

#725 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — libcperciva: use-after-free in network_ssl poke() triggered on every https_request completion

Status: Open.

#724 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo: kvlds_multiset()/kvlds-undump infinite hang on empty, truncated, or zero-length-entry dumps

Status: Open.

#723 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo/libcperciva: chunked Transfer-Encoding off-by-two in http.c — remote abort / 2-byte heap overflow of kivaloo-s3

Status: Open.

#722 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo: cyclic child pagenum causes infinite page-fetch loop (total service DoS)

Status: Open.

#721 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo: forged child oldestleaf makes kvlds delete live blocks via lbs (confused deputy)

Status: Open.

#720 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo: child page with root bit set collapses entire B+Tree, permanent data loss

Status: Open.

#719 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Tarsnap client: use-after-free / double-free in archive_write_open_multitape() error path

Status: Open.

#716 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026

Bug Bounty Report — Kivaloo: heap out-of-bounds read in kvlds deserialize() via unsorted keys in a crafted B+Tree page

Status: Open.

#715 In Tarsnap/tarsnap;

· chengdazhi opened on Jul 14, 2026