Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39464

Fix off-by-one stack buffer overflow in PROXY v1 head

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      The header parsing loop could append a null terminator past the end of
      the buffer when processing maximum-length PROXY v1 headers.

      Fix by increasing the buffer size by one byte and using bounded reads
      while preserving full header parsing.

      Treat zero-length reads as connection close in this context.

      Attachments

        Activity

          People

            gkodinov Georgi Kodinov
            gkodinov Georgi Kodinov
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.