• Oran Agra's avatar
    Fix possible corruption in sdsResize (CVE-2023-41056) (#12924) · f7b1d028
    Oran Agra authored
    #11766 introduced a bug in sdsResize where it could forget to update the
    sds type in the sds header and then cause an overflow in sdsalloc. it
    looks like the only implication of that is a possible assertion in HLL,
    but it's hard to rule out possible heap corruption issues with
    clientsCronResizeQueryBuffer
    f7b1d028
sds.c 48.7 KB