• Oran Agra's avatar
    Fix heap overflow corruption in XAUTOCLAIM (CVE-2022-31144) (#11002) · 15ae4e29
    Oran Agra authored
    The temporary array for deleted entries reply of XAUTOCLAIM was
    insufficient, but also in fact the COUNT argument should be used to
    control the size of the reply, so instead of terminating the loop by
    only counting the claimed entries, we'll count deleted entries as well.
    
    Fix #10968
    Addresses CVE-2022-31144
    
    (cherry picked from commit 2825b605)
    15ae4e29
t_stream.c 156 KB