Potential integer overflow in sds.c
- Vorherrschende Sprache
- C
- Sterne
- 5.6k
- Forks
- 510
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
The `sdsnewlen` and `sdsMakeRoomFor` function implemented in [sds.c](https://github.com/antirez/sds/blob/master/sds.c) is quite similiar to those in the [redis](https://github.com/redis/redis). Thus, it's very likely that this integer overflow in [CVE-2021-21309](https://nvd.nist.gov/vuln/detail/CVE-2021-21309) also affects [sds](https://github.com/antirez/sds).
Would you can help to check if this bug is true? If it's true, I'd like to open a PR for that if necessary. Thank you for your effort and patience!
And here is the [patch](https://github.com/redis/redis/commit/d32f2e9999ce003bad0bd2c3bca29f64dcce4433) for [CVE-2021-21309](https://nvd.nist.gov/vuln/detail/CVE-2021-21309) for your reference if this issue needs to be fixed.
Beitragsleitfaden
Für dieses Repository ist kein Beitragsleitfaden indexiert
Bewertung
Dieses Issue wurde noch nicht bewertet.