• Oran Agra's avatar
    Fix possible corruption in sdsResize (CVE-2023-41056) · e351099e
    Oran Agra authored
    #11766 introduced a bug in sdsResize where it could forget to update
    the sds type in the sds header and then cause an overflow in sdsalloc.
    it looks like the only implication of that is a possible assertion in HLL,
    but it's hard to rule out possible heap corruption issues with clientsCronResizeQueryBuffer
    e351099e
sds.c 50.2 KB