1. 04 Oct, 2021 1 commit
    • Oran Agra's avatar
      Fix ziplist and listpack overflows and truncations (CVE-2021-32627, CVE-2021-32628) · 6facfb7a
      Oran Agra authored
      - fix possible heap corruption in ziplist and listpack resulting by trying to
        allocate more than the maximum size of 4GB.
      - prevent ziplist (hash and zset) from reaching size of above 1GB, will be
        converted to HT encoding, that's not a useful size.
      - prevent listpack (stream) from reaching size of above 1GB.
      - XADD will start a new listpack if the new record may cause the previous
        listpack to grow over 1GB.
      - XADD will respond with an error if a single stream record is over 1GB
      - List type (ziplist in quicklist) was truncating strings that were over 4GB,
        now it'll respond with an error.
      
      (cherry picked from commit 68e221a3f98a427805d31c1760b4cdf37ba810ab)
      6facfb7a
  2. 14 Mar, 2019 1 commit
  3. 28 Nov, 2017 1 commit
  4. 29 Jun, 2017 1 commit
  5. 11 Jan, 2017 1 commit
  6. 20 Jun, 2016 1 commit
  7. 04 Nov, 2015 1 commit
    • antirez's avatar
      Fix HINCRBYFLOAT to work with long doubles. · 71aa9b75
      antirez authored
      During the refactoring needed for lazy free, specifically the conversion
      of t_hash from struct robj to plain SDS strings, HINCRBFLOAT was
      accidentally moved away from long doubles to doubles for internal
      processing of increments and formatting.
      
      The diminished precision created more obvious artifacts in the way small
      numbers are formatted once we convert from decimal number in radix 10 to
      double and back to its string in radix 10.
      
      By using more precision, we now have less surprising results at least
      with small numbers like "1.23", exactly like in the previous versions of
      Redis.
      
      See issue #2846.
      71aa9b75
  8. 01 Oct, 2015 6 commits
  9. 27 Jul, 2015 1 commit
  10. 26 Jul, 2015 6 commits
  11. 27 Feb, 2015 3 commits
  12. 21 Feb, 2015 1 commit
  13. 02 Dec, 2014 1 commit
  14. 05 Nov, 2013 1 commit
    • antirez's avatar
      SCAN code refactored to parse cursor first. · ebcb6251
      antirez authored
      The previous implementation of SCAN parsed the cursor in the generic
      function implementing SCAN, SSCAN, HSCAN and ZSCAN.
      
      The actual higher-level command implementation only checked for empty
      keys and return ASAP in that case. The result was that inverting the
      arguments of, for instance, SSCAN for example and write:
      
          SSCAN 0 key
      
      Instead of
      
          SSCAN key 0
      
      Resulted into no error, since 0 is a non-existing key name very likely.
      Just the iterator returned no elements at all.
      
      In order to fix this issue the code was refactored to extract the
      function to parse the cursor and return the error. Every higher level
      command implementation now parses the cursor and later checks if the key
      exist or not.
      ebcb6251
  15. 28 Oct, 2013 2 commits
  16. 22 Jul, 2013 1 commit
    • antirez's avatar
      Introduction of a new string encoding: EMBSTR · 894eba07
      antirez authored
      Previously two string encodings were used for string objects:
      
      1) REDIS_ENCODING_RAW: a string object with obj->ptr pointing to an sds
      stirng.
      
      2) REDIS_ENCODING_INT: a string object where the obj->ptr void pointer
      is casted to a long.
      
      This commit introduces a experimental new encoding called
      REDIS_ENCODING_EMBSTR that implements an object represented by an sds
      string that is not modifiable but allocated in the same memory chunk as
      the robj structure itself.
      
      The chunk looks like the following:
      
      +--------------+-----------+------------+--------+----+
      | robj data... | robj->ptr | sds header | string | \0 |
      +--------------+-----+-----+------------+--------+----+
                           |                       ^
                           +-----------------------+
      
      The robj->ptr points to the contiguous sds string data, so the object
      can be manipulated with the same functions used to manipulate plan
      string objects, however we need just on malloc and one free in order to
      allocate or release this kind of objects. Moreover it has better cache
      locality.
      
      This new allocation strategy should benefit both the memory usage and
      the performances. A performance gain between 60 and 70% was observed
      during micro-benchmarks, however there is more work to do to evaluate
      the performance impact and the memory usage behavior.
      894eba07
  17. 15 Feb, 2013 1 commit
  18. 28 Jan, 2013 2 commits
  19. 08 Nov, 2012 1 commit
  20. 11 Jun, 2012 1 commit
    • antirez's avatar
      Dump ziplist hex value on failed assertion. · ee789e15
      antirez authored
      The ziplist -> hashtable conversion code is triggered every time an hash
      value must be promoted to a full hash table because the number or size of
      elements reached the threshold.
      
      If a problem in the ziplist causes the same field to be present
      multiple times, the assertion of successful addition of the element
      inside the hash table will fail, crashing server with a failed
      assertion, but providing little information about the problem.
      
      This code adds a new logging function to perform the hex dump of binary
      data, and makes sure that the ziplist -> hashtable conversion code uses
      this new logging facility to dump the content of the ziplist when the
      assertion fails.
      
      This change was originally made in order to investigate issue #547.
      ee789e15
  21. 23 Mar, 2012 1 commit
  22. 10 Mar, 2012 2 commits
  23. 21 Feb, 2012 1 commit
  24. 16 Feb, 2012 1 commit
  25. 04 Jan, 2012 1 commit
    • Pieter Noordhuis's avatar
      Implements ziplistFind · fe458402
      Pieter Noordhuis authored
      To improve the performance of the ziplist implementation, some
      functions have been converted to macros to avoid unnecessary stack
      movement and duplicate variable assignments.
      fe458402