valkey/tests
meir@redislabs.com 6ac3c0b7ab Fix protocol parsing on 'ldbReplParseCommand' (CVE-2021-32672)
The protocol parsing on 'ldbReplParseCommand' (LUA debugging)
Assumed protocol correctness. This means that if the following
is given:
*1
$100
test
The parser will try to read additional 94 unallocated bytes after
the client buffer.
This commit fixes this issue by validating that there are actually enough
bytes to read. It also limits the amount of data that can be sent by
the debugger client to 1M so the client will not be able to explode
the memory.
2021-10-04 13:59:19 +03:00
..
assets
cluster
helpers
integration
modules
sentinel
support Test infra, handle RESP3 attributes and big-numbers and bools (#9235) 2021-07-21 21:07:02 +03:00
tmp
unit Fix protocol parsing on 'ldbReplParseCommand' (CVE-2021-32672) 2021-10-04 13:59:19 +03:00
instances.tcl
test_helper.tcl