@eyal0 could you do me a solid and take a look at my out-of-bounds checking logic? There might be a signed integer underflow UB since ip->data.ival - 1 is not checked.

@CiscoTalos could you please take a look whether this patch seems reasonable? I'm unsure whether ip->data.ival - 1 is still an attack vector since ip->data.ival - 1 might underflow

ip->data.ival - 1 will be negative if ip->data.ival is 0, but the if condition that happens next will terminate the program. So the suggested patch fixes the issue.

Thank you very much for the verification. The fix is now included in main branch and will be released with the next gerbv version (probably in the upcoming week).

Thank you. We prefer 1-2 business days notice of the release date so we can coordinate on our end.

@CiscoTalos I aim to create a release this weekend. Does this suit you?