• Oran Agra's avatar
    Fix possible crash due to OOM panic on invalid command (#13380) · 69b7137d
    Oran Agra authored
    getKeysUsingKeySpece had the range check AFTER the allocation, of the
    keys buffer, which could lead to an OOM panic when invalid arguments are
    provided, leading to an overflow.
    The allocated memory is only used after the range check, so there's no
    risk of buffer overrun.
    The OOM panic can happen on 32bit builds, or 64 builds running on
    systems with less than 4GB of RAM, and is reachable via the COMMAND
    GETKEYSANDFLAGS, and ACL key name validation.
    69b7137d
introspection-2.tcl 8.82 KB