Malavan Sotheeswaran ad0be5666c
Security fixes from redis: Avoid integer overflows in SETRANGE and SORT, Fix range issues in ZRANDMEMBER and HRANDFIELD (#547)
* Avoid integer overflows in SETRANGE and SORT (CVE-2022-35977) (#11720)

Authenticated users issuing specially crafted SETRANGE and SORT(_RO)
commands can trigger an integer overflow, resulting with Redis attempting
to allocate impossible amounts of memory and abort with an OOM panic.

* Fix range issues in ZRANDMEMBER and HRANDFIELD (CVE-2023-22458) (#11674)

missing range check in ZRANDMEMBER and HRANDIFLD leading to panic due
to protocol limitations

* use std::min/max

* add assert_not_equal

Co-authored-by: Oran Agra <oran@redislabs.com>
2023-01-17 17:10:39 -05:00
..
2020-11-30 17:47:04 -05:00
2021-11-09 19:00:01 -05:00
2021-05-19 02:59:48 +00:00
2021-05-21 05:54:39 +00:00
2021-05-19 02:59:48 +00:00
2022-04-26 01:55:22 +00:00
2022-04-26 01:55:22 +00:00
2021-05-21 05:54:39 +00:00
2021-05-21 05:54:39 +00:00
2022-05-18 01:29:15 +00:00
2021-05-19 02:59:48 +00:00
2021-11-09 19:00:01 -05:00
2021-05-19 02:59:48 +00:00
2022-08-23 06:37:26 +00:00
2021-05-21 05:54:39 +00:00
2021-05-19 02:59:48 +00:00
2021-05-21 05:54:39 +00:00
2022-05-18 01:29:15 +00:00
2021-05-21 05:54:39 +00:00
2022-05-18 01:29:15 +00:00
2021-05-28 22:40:03 -04:00
2021-05-19 02:59:48 +00:00
2021-05-21 05:54:39 +00:00
2021-05-19 02:59:48 +00:00
2021-02-24 10:10:02 +02:00
2021-05-19 02:59:48 +00:00
2021-06-25 06:10:13 +00:00
2021-05-19 02:59:48 +00:00
2021-05-19 02:59:48 +00:00
2020-06-07 16:43:07 -04:00
2021-05-21 05:54:39 +00:00
2022-04-26 01:55:22 +00:00
2021-05-21 05:54:39 +00:00
2021-05-21 05:54:39 +00:00
2021-05-28 23:32:46 +00:00
2022-08-17 10:31:30 -07:00
2021-05-25 18:35:45 +00:00
2021-05-19 02:59:48 +00:00
2022-02-02 14:20:19 -05:00
2021-05-21 05:54:39 +00:00
2021-05-21 05:54:39 +00:00
2021-05-19 02:59:48 +00:00
2022-05-18 01:29:15 +00:00
2022-04-26 01:55:22 +00:00
2021-05-19 02:59:48 +00:00
2021-05-19 02:59:48 +00:00
2021-05-21 05:54:39 +00:00
2021-05-21 05:54:39 +00:00