File CVE-2025-63744.patch of Package radare2

diff -Nurp radare2-6.0.4.orig/libr/bin/format/ne/ne.c radare2-6.0.4/libr/bin/format/ne/ne.c
--- radare2-6.0.4.orig/libr/bin/format/ne/ne.c	2025-11-17 08:10:08.291680720 +0000
+++ radare2-6.0.4/libr/bin/format/ne/ne.c	2025-11-17 08:18:37.379680720 +0000
@@ -3,7 +3,8 @@
 #include "ne.h"
 
 static char *__get_target_os(r_bin_ne_obj_t *bin) {
-	switch (bin->ne_header->targOS) {
+	const int targetOS = (bin->ne_header) ? bin->ne_header->targOS: 0;
+	switch (targetOS) {
 	case 1:
 		return "OS/2";
 	case 2:
diff -Nurp radare2-6.0.4.orig/libr/bin/p/bin_dyldcache.c radare2-6.0.4/libr/bin/p/bin_dyldcache.c
--- radare2-6.0.4.orig/libr/bin/p/bin_dyldcache.c	2025-11-17 08:10:08.299680720 +0000
+++ radare2-6.0.4/libr/bin/p/bin_dyldcache.c	2025-11-17 08:14:20.263680720 +0000
@@ -1156,7 +1156,11 @@ static bool load(RBinFile *bf, RBuffer *
 	if (!bf || !bf->rbin || !bf->rbin->iob.desc_get) {
 		return false;
 	}
-	const char * io_plugin_name = bf->rbin->iob.desc_get (bf->rbin->iob.io, bf->fd)->plugin->meta.name;
+	RIODesc *desc = bf->rbin->iob.desc_get (bf->rbin->iob.io, bf->fd);
+	if (!desc) {
+		return false;
+	}
+	const char * io_plugin_name = desc->plugin->meta.name;
 	if (strcmp (io_plugin_name, "dsc") != 0) {
 		R_LOG_ERROR ("Use dsc:// for dyld caches");
 		return false;
openSUSE Build Service is sponsored by