]> git.ipfire.org Git - thirdparty/squid.git/commit
projects / thirdparty / squid.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2e4fb2d) | patch
Bug 5378: type mismatch in libTrie (#1830)
authorFrancesco Chemolli <5175948+kinkie@users.noreply.github.com>
Sun, 2 Jun 2024 14:41:16 +0000 (14:41 +0000)
committerAmos Jeffries <yadij@users.noreply.github.com>
Wed, 26 Jun 2024 13:24:18 +0000 (01:24 +1200)
commit3b168df6e40ae259c4997a53473986a0f25704be
treeada5adc100867f807126961e739d59aef9baaea9tree
parent2e4fb2dfacb422c1611c20aeee3d924d0a491dc6commit | diff
Bug 5378: type mismatch in libTrie (#1830)

TrieNode::add() incorrectly computed an offset of an internal data
structure, resulting in out-of-bounds memory accesses that could cause
corruption or crashes.

This bug was discovered and detailed by Joshua Rogers at
https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html
where it was filed as "Buffer Underflow in ESI".
lib/libTrie/TrieNode.cc diff | blob | blame | history
Mirror of https://github.com/squid-cache/squid.git