PT-2026-125052

ZDICT trainFromBuffer is never told the length of the samples buffer. Before 0.4.10, zstd::dict::from continuous initially train dict called it directly: up to 0.2.1 without checking the sample sizes against the buffer at all, and from 0.3.0 with a sum that wraps around when overflow checks are...

PT-2026-125060

ZDICT trainFromBuffer is never told the length of the samples buffer, so train from buffer checked that the sample sizes add up to it. With overflow checks off, as in release builds, that sum wrapped around: sizes totalling 2^64 plus the buffer length passed the check, and the trainer read past t...