futriix

History

Malavan Sotheeswaran ad0be5666c

Security fixes from redis: Avoid integer overflows in SETRANGE and SORT, Fix range issues in ZRANDMEMBER and HRANDFIELD (#547 )

* Avoid integer overflows in SETRANGE and SORT (CVE-2022-35977) (#11720)

Authenticated users issuing specially crafted SETRANGE and SORT(_RO)
commands can trigger an integer overflow, resulting with Redis attempting
to allocate impossible amounts of memory and abort with an OOM panic.

* Fix range issues in ZRANDMEMBER and HRANDFIELD (CVE-2023-22458) (#11674)

missing range check in ZRANDMEMBER and HRANDIFLD leading to panic due
to protocol limitations

* use std::min/max

* add assert_not_equal

Co-authored-by: Oran Agra <oran@redislabs.com>

2023-01-17 17:10:39 -05:00

benchmark.tcl

Merge tag '6.2.1' into unstable

2021-05-19 02:59:48 +00:00

cli.tcl

Merge tag '6.2.1' into unstable

2021-05-19 02:59:48 +00:00

cluster.tcl

Add support for plaintext clients in TLS cluster (#8587 )

2021-03-30 23:11:32 +03:00

keydb.tcl

TLS test fix from redis (#524 )