Details
-
Bug
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Duplicate
-
13.0
-
Not for Release Notes
Description
The header parsing loop could append a null terminator past the end of
the buffer when processing maximum-length PROXY v1 headers.
Fix by increasing the buffer size by one byte and using bounded reads
while preserving full header parsing.
Treat zero-length reads as connection close in this context.
Attachments
Issue Links
- duplicates
-
MDEV-39564 One-byte OOB write in PROXY protocol v1 header parser
-
- Closed
-