Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
redis
Commits
b351d5a3
Commit
b351d5a3
authored
Oct 02, 2024
by
Oran Agra
Browse files
Fix ACL SETUSER Read/Write key pattern selector (CVE-2024-31227)
The '%' rule must contain one or both of R/W
parent
fe8de431
Changes
1
Hide whitespace changes
Inline
Side-by-side
src/acl.c
View file @
b351d5a3
...
...
@@ -1051,7 +1051,7 @@ int ACLSetSelector(aclSelector *selector, const char* op, size_t oplen) {
flags
|=
ACL_READ_PERMISSION
;
}
else
if
(
toupper
(
op
[
offset
])
==
'W'
&&
!
(
flags
&
ACL_WRITE_PERMISSION
))
{
flags
|=
ACL_WRITE_PERMISSION
;
}
else
if
(
op
[
offset
]
==
'~'
)
{
}
else
if
(
op
[
offset
]
==
'~'
&&
flags
)
{
offset
++
;
break
;
}
else
{
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment