| { |
| "item_id": "ker-mldsa_hint", |
| "kernel": "mldsa_hint", |
| "advisory": "RUSTSEC-2026-0076", |
| "crate": "libcrux-ml-dsa", |
| "pre_version": "0.0.7", |
| "post_version": "0.0.8", |
| "advisory_url": "https://github.com/cryspen/libcrux/pull/1348", |
| "title": "Panic in Signature Hint Decoding During Verification", |
| "source_file": "src/encoding/signature.rs", |
| "function": "hint_weight", |
| "signature": "pub fn hint_weight(hint: &[u8], max_ones: usize, rows: usize) -> Option<usize>", |
| "spec_doc": "Decodes the ML-DSA signature hint encoding: hint[..max_ones] are positions, hint[max_ones..max_ones+rows] are cumulative counts that must be non-decreasing and at most max_ones. Returns the sum of the hint bytes it consumed, or None for a malformed encoding. Must never panic on any input of length >= max_ones+rows.", |
| "bug_class": "panic", |
| "fidelity": "verbatim_logic", |
| "extraction_note": "src/ml_dsa_generic.rs / encoding/signature.rs deserialize hint: checked previous instead of current against max_ones", |
| "witness_args": "&[0u8, 0, 200], 2usize, 1usize", |
| "labels": { |
| "buggy": "libcrux-ml-dsa@0.0.7", |
| "reference": "libcrux-ml-dsa@0.0.8" |
| } |
| } |
