diff options
author | Justin Brewer <jzb0012@auburn.edu> | 2018-05-17 20:17:13 -0500 |
---|---|---|
committer | michael-grunder <michael.grunder@gmail.com> | 2018-05-20 09:07:21 -0700 |
commit | 109197585762986502d3a8fa628acc1b82b68cf3 (patch) | |
tree | b39ba2b444ff7add214fbc4a2f60f4b9e1ca8d92 /CHANGELOG.md | |
parent | 93421f9d84868989ab0e401fb3be7b31c7a9c181 (diff) |
Fix bulk and multi-bulk length truncation
processMultiBulkItem truncates the value read from readLongLong,
resulting in a corrupted state when the next item is read.
createArray takes an int, so bound to INT_MAX.
Inspection showed that processBulkItem had the same truncation issue.
createString takes size_t, so bound to SIZE_MAX. This only has an
effect on 32-bit platforms.
A strict lower bound is also added, since negative lengths other
than -1 are invalid according to RESP.
Signed-off-by: Justin Brewer <jzb0012@auburn.edu>
Diffstat (limited to 'CHANGELOG.md')
0 files changed, 0 insertions, 0 deletions