File CVE-2025-63744.patch of Package radare2
diff -Nurp radare2-6.0.4.orig/libr/bin/format/ne/ne.c radare2-6.0.4/libr/bin/format/ne/ne.c
--- radare2-6.0.4.orig/libr/bin/format/ne/ne.c 2025-11-17 08:10:08.291680720 +0000
+++ radare2-6.0.4/libr/bin/format/ne/ne.c 2025-11-17 08:18:37.379680720 +0000
@@ -3,7 +3,8 @@
#include "ne.h"
static char *__get_target_os(r_bin_ne_obj_t *bin) {
- switch (bin->ne_header->targOS) {
+ const int targetOS = (bin->ne_header) ? bin->ne_header->targOS: 0;
+ switch (targetOS) {
case 1:
return "OS/2";
case 2:
diff -Nurp radare2-6.0.4.orig/libr/bin/p/bin_dyldcache.c radare2-6.0.4/libr/bin/p/bin_dyldcache.c
--- radare2-6.0.4.orig/libr/bin/p/bin_dyldcache.c 2025-11-17 08:10:08.299680720 +0000
+++ radare2-6.0.4/libr/bin/p/bin_dyldcache.c 2025-11-17 08:14:20.263680720 +0000
@@ -1156,7 +1156,11 @@ static bool load(RBinFile *bf, RBuffer *
if (!bf || !bf->rbin || !bf->rbin->iob.desc_get) {
return false;
}
- const char * io_plugin_name = bf->rbin->iob.desc_get (bf->rbin->iob.io, bf->fd)->plugin->meta.name;
+ RIODesc *desc = bf->rbin->iob.desc_get (bf->rbin->iob.io, bf->fd);
+ if (!desc) {
+ return false;
+ }
+ const char * io_plugin_name = desc->plugin->meta.name;
if (strcmp (io_plugin_name, "dsc") != 0) {
R_LOG_ERROR ("Use dsc:// for dyld caches");
return false;