• meir@redislabs.com's avatar
    Fix protocol parsing on 'ldbReplParseCommand' (CVE-2021-32672) · f621c0a4
    meir@redislabs.com authored
    The protocol parsing on 'ldbReplParseCommand' (LUA debugging)
    Assumed protocol correctness. This means that if the following
    is given:
    *1
    $100
    test
    The parser will try to read additional 94 unallocated bytes after
    the client buffer.
    This commit fixes this issue by validating that there are actually enough
    bytes to read. It also limits the amount of data that can be sent by
    the debugger client to 1M so the client will not be able to explode
    the memory.
    
    (cherry picked from commit 4f95e6809902665ced50646107d174dd8137bcaa)
    f621c0a4
scripting.tcl 26 KB