)]}'
{
  "commit": "7abb57de705db8a7c4d181d0715f50739ca1139c",
  "tree": "b8f4a8a7395a0830012af8e3a67f8a8f3c2bf0db",
  "parents": [
    "2263fcf0251337a45c54e7c59bd807044eb11541"
  ],
  "author": {
    "name": "Eli Lipsitz",
    "email": "elipsitz@pigweed.infra.roller.google.com",
    "time": "Tue Jun 18 21:31:30 2024 +0000"
  },
  "committer": {
    "name": "CQ Bot Account",
    "email": "pigweed-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Jun 18 21:31:30 2024 +0000"
  },
  "message": "roll: pw_toolchain, pw_toolchain: pw_grpc: Avoid buffer overflow when processing corrupt frames\n\nHTTP2 HEADERS and DATA frames are variable-length frames, that include\nflags that enable certain features that take up space in the frame: e.g.\na \"padding\" bit that adds a 1-byte \"padding\" field, or a \"priority\" flag\nthat adds a 5-byte \"priority\" field.\n\nThe handlers for these frames did not verify the size of the frame\npayloads when reading these optional fields, if present. Thus, an\nundersized frame that had these flag bits set would lead to a buffer\noverread.\n\nThis commit improves the handlers to explicitly check the frame sizes,\nand send the appropriate connection errors (according to the RFC) if\nthey occur, without reading past the end of the payload buffer.\nIf this occurs, it\u0027s almost certainly due to some underlying transport\ncorruption.\n\nOriginal-Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/216651\nLint: Lint 🤖 \u003candroid-build-ayeaye@system.gserviceaccount.com\u003e\n\nhttps://pigweed.googlesource.com/pigweed/pigweed\npw_toolchain, pw_toolchain Rolled-Commits: 9650f5fcbae1ea3..49d5876907ba804\nRoller-URL: https://ci.chromium.org/b/8744757712942869777\nGitWatcher: ignore\nCQ-Do-Not-Cancel-Tryjobs: true\nChange-Id: I2a74e69fbffecdca4ba419706f89395dc6bd1a40\nReviewed-on: https://pigweed-review.googlesource.com/c/pigweed/quickstart/bazel/+/216816\nCommit-Queue: Pigweed Roller \u003cpigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com\u003e\nLint: Lint 🤖 \u003candroid-build-ayeaye@system.gserviceaccount.com\u003e\nBot-Commit: Pigweed Roller \u003cpigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9fec93766dbf5a21d4eba90c5b7ac3144ce20cbb",
      "old_mode": 33188,
      "old_path": "WORKSPACE",
      "new_id": "759e70503a88a7923141b4aba0707a6af5909d41",
      "new_mode": 33188,
      "new_path": "WORKSPACE"
    }
  ]
}