Three memory-safety bugs in Godot's untrusted-file parsers | Axe Ghost. On Steam! | Offprint
axeghost.offprint.app
I found three serious bugs in Godot 4.7 in an audit conducted with an LLM agent. The bugs are due to missing bounds checking in code that reads untrusted files. Using files that are deliberately...