]> git.ipfire.org Git - thirdparty/squid.git/commit
projects / thirdparty / squid.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e94ff52) | patch
Bug 5378: type mismatch in libTrie (#1830)
authorFrancesco Chemolli <5175948+kinkie@users.noreply.github.com>
Sun, 2 Jun 2024 14:41:16 +0000 (14:41 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Mon, 3 Jun 2024 13:24:59 +0000 (13:24 +0000)
commit920563e7a080155fae3ced73d6198781e8b0ff04
tree6c29f1dbc981c043d4eb297c02c275f742163874tree
parente94ff5274ce05e6f06d7c789bb2c6452c7886584commit | diff
Bug 5378: type mismatch in libTrie (#1830)

TrieNode::add() incorrectly computed an offset of an internal data
structure, resulting in out-of-bounds memory accesses that could cause
corruption or crashes.

This bug was discovered and detailed by Joshua Rogers at
https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html
where it was filed as "Buffer Underflow in ESI".
lib/libTrie/TrieNode.cc diff | blob | blame | history
Mirror of https://github.com/squid-cache/squid.git