]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9654e57) | patch
BUG/MEDIUM: connection: sanitize PPv2 header length before parsing address information
authorKOVACS Krisztian <hidden@balabit.com>
Wed, 19 Nov 2014 09:53:20 +0000 (10:53 +0100)
committerWilly Tarreau <w@1wt.eu>
Fri, 21 Nov 2014 06:45:17 +0000 (07:45 +0100)
commitefd3aa93412648cf923bf3d2e171c0b84e9d7a69
treefcac7ce917c949dd96b8b62259a9f47c31072c69tree | snapshot
parent9654e57fac86c773091b892f42015ba2ba56be5acommit | diff
BUG/MEDIUM: connection: sanitize PPv2 header length before parsing address information

Previously, if hdr_v2->len was less than the length of the protocol
specific address information we could have read after the end of the
buffer and initialize the sockaddr structure with junk.

Signed-off-by: KOVACS Krisztian <hidden@balabit.com>
[WT: this is only tagged medium since proxy protocol is only used from
 trusted sources]

This must be backported to 1.5.
src/connection.c diff | blob | history
haproxy upstream