1. 14 Feb, 2022 1 commit
  2. 12 Oct, 2021 1 commit
  3. 04 Oct, 2021 1 commit
    • Oran Agra's avatar
      Fix redis-cli / redis-sential overflow on some platforms (CVE-2021-32762) (#9587) · 0215324a
      Oran Agra authored
      
      
      The redis-cli command line tool and redis-sentinel service may be vulnerable
      to integer overflow when parsing specially crafted large multi-bulk network
      replies. This is a result of a vulnerability in the underlying hiredis
      library which does not perform an overflow check before calling the calloc()
      heap allocation function.
      
      This issue only impacts systems with heap allocators that do not perform their
      own overflow checks. Most modern systems do and are therefore not likely to
      be affected. Furthermore, by default redis-sentinel uses the jemalloc allocator
      which is also not vulnerable.
      Co-authored-by: default avatarYossi Gottlieb <yossigo@gmail.com>
      0215324a
  4. 30 Sep, 2021 1 commit
  5. 22 Dec, 2020 1 commit
  6. 13 Dec, 2020 1 commit
  7. 06 Aug, 2020 1 commit
  8. 07 Oct, 2019 1 commit
    • Yossi Gottlieb's avatar
      TLS: Connections refactoring and TLS support. · b087dd1d
      Yossi Gottlieb authored
      * Introduce a connection abstraction layer for all socket operations and
      integrate it across the code base.
      * Provide an optional TLS connections implementation based on OpenSSL.
      * Pull a newer version of hiredis with TLS support.
      * Tests, redis-cli updates for TLS support.
      b087dd1d
  9. 23 Sep, 2019 1 commit
  10. 20 Sep, 2019 1 commit
  11. 08 May, 2019 1 commit
  12. 09 Jan, 2019 9 commits
  13. 25 May, 2018 1 commit
  14. 21 Dec, 2016 1 commit
  15. 17 Nov, 2015 1 commit
    • antirez's avatar
      Lua debugger: use sds_malloc() to allocate eval cli array. · e57cccde
      antirez authored
      Redis-cli handles the debugger "eval" command in a special way since
      sdssplitargs() would not be ok: we need to send the Redis debugger the
      whole Lua script without any parsing. However in order to later free the
      argument vector inside redis-cli using just sdsfreesplitres(), we need
      to allocate the array of SDS pointers using the same allocator SDS is
      using, that may differ to what Redis is using.
      
      So now a newer version of SDS exports sds_malloc() and other allocator
      functions to give access, to the program it is linked to, the allocator
      used internally by SDS.
      e57cccde
  16. 25 Jul, 2015 1 commit
  17. 28 Apr, 2015 1 commit
    • antirez's avatar
      Fix Sentinel memory leak (hiredis bug) · c806dd79
      antirez authored
      This fixes issue #2535, that was actually an hiredis library bug (I
      submitted an issue and fix to the redis/hiredis repo as well).
      
      When an asynchronous hiredis connection subscribes to a Pub/Sub channel
      and gets an error, and in other related conditions, the function
      redisProcessCallbacks() enters a code path where the link is
      disconnected, however the function returns before freeing the allocated
      reply object. This causes a memory leak. The memory leak was trivial to
      trigger in Redis Sentinel, which uses hiredis, every time we tried to
      subscribe to an instance that required a password, in case the Sentinel
      was configured either with the wrong password or without password at
      all. In this case, the -AUTH error caused the leaking code path to be
      executed.
      
      It was verified with Valgrind that after this change the leak no longer
      happens in Sentinel with a misconfigured authentication password.
      c806dd79
  18. 29 Sep, 2014 1 commit
  19. 18 Sep, 2014 1 commit
  20. 26 Aug, 2014 1 commit
  21. 25 Aug, 2014 1 commit
  22. 13 Aug, 2014 1 commit
  23. 07 Aug, 2014 1 commit
  24. 23 Jun, 2014 4 commits
  25. 12 Aug, 2013 1 commit
  26. 25 Jul, 2013 1 commit
  27. 11 Jul, 2013 1 commit
  28. 17 Dec, 2012 1 commit
  29. 12 Dec, 2012 1 commit