fix(gpu): bound embedded section reads

Fixes #6657
This commit is contained in:
morluto
2026-10-23 19:17:40 +08:00
parent b443b5a89b
commit 8695ca8257
3 changed files with 86 additions and 2 deletions
+3 -1
View File
@@ -128,7 +128,9 @@ A location with `container_id: null` uses original file offsets. Other locations
use that inventoried object's decoded byte coordinates. Follow its parent,
encoded location and digest to trace decompressed metadata back to a native
section and the original file. Decoded offsets are never presented as physical
file offsets.
file offsets. Reads from an ELF or PE GPU section stay within that declared
section extent, so neighboring native section bytes cannot complete a
truncated embedded bundle header.
The CLI uses the same service and contracts: