Out-of-bounds read when training a dictionary from inconsistent sample sizes

ZDICTtrainFromBuffer is never told the length of the samples buffer. Before 0.4.10, zstd::dict::fromcontinuous initially traindict called it directly: up to 0.2.1 without checking the sample sizes against the buffer at all, and from 0.3.0 with a sum that wraps around when overflow checks are off,...

RUSTSEC-2026-0393 Out-of-bounds read when training a dictionary from inconsistent sample sizes

ZDICTtrainFromBuffer is never told the length of the samples buffer. Before 0.4.10, zstd::dict::fromcontinuous initially traindict called it directly: up to 0.2.1 without checking the sample sizes against the buffer at all, and from 0.3.0 with a sum that wraps around when overflow checks are off,...