Harden libmaxminddb against crafted/malformed databases#416

Merged

horgh merged 27 commits intomainfrom

Feb 23, 2026

Commits on Feb 20, 2026

Fix off-by-one in MMDB_read_node() bounds check

oschwald
and
claude
committed
Add recursion depth limit to skip_map_or_array()

oschwald
and
claude
committed
Fix alloca off-by-one in mmdblookup on Windows

oschwald
and
claude
committed
Fix MMDB_lookup_string leaving *mmdb_error uninitialized on GAI failure

oschwald
and
claude
committed
Fix print_indentation stack overflow on negative indent

oschwald
and
claude
committed
NULL file_content after munmap to prevent double-unmap

oschwald
and
claude
committed
Fix gmtime NULL dereference in mmdblookup dump_meta

oschwald
and
claude
committed
Fix integer overflow in find_address_in_search_tree bounds check

oschwald
and
claude
committed
Fix printf format specifiers in mmdblookup dump_meta

oschwald
and
claude
committed
Fix integer overflow in MMDB_read_node/find_ipv4_start_node pointer arithmetic

oschwald
and
claude
committed
Use GetFileSizeEx for Windows file size

oschwald
and
claude
committed
Validate array/map size in get_entry_data_list against remaining data

oschwald
and
claude
committed
Extract shared MMDB test writer helpers into mmdb_test_writer.h

oschwald
and
claude
committed

Commits on Feb 23, 2026