Malavan Sotheeswaran ad0be5666c
Security fixes from redis: Avoid integer overflows in SETRANGE and SORT, Fix range issues in ZRANDMEMBER and HRANDFIELD (#547)
* Avoid integer overflows in SETRANGE and SORT (CVE-2022-35977) (#11720)

Authenticated users issuing specially crafted SETRANGE and SORT(_RO)
commands can trigger an integer overflow, resulting with Redis attempting
to allocate impossible amounts of memory and abort with an OOM panic.

* Fix range issues in ZRANDMEMBER and HRANDFIELD (CVE-2023-22458) (#11674)

missing range check in ZRANDMEMBER and HRANDIFLD leading to panic due
to protocol limitations

* use std::min/max

* add assert_not_equal

Co-authored-by: Oran Agra <oran@redislabs.com>
2023-01-17 17:10:39 -05:00
..
2020-03-25 15:55:24 +01:00
2021-05-19 02:59:48 +00:00
2019-12-18 00:24:07 -05:00
2022-03-31 17:48:37 -04:00
2020-06-07 00:40:58 -04:00
2022-12-29 14:47:06 -05:00
2010-10-15 12:54:53 +02:00
2020-02-08 16:49:41 -05:00
2021-05-19 02:59:48 +00:00
2022-02-02 14:20:19 -05:00
2022-02-02 14:20:19 -05:00
2021-01-17 15:48:48 +02:00