fluencelabs/redis
1
0
Fork 0
mirror of https://github.com/fluencelabs/redis synced 2025-03-24 11:30:50 +00:00
Code Issues Projects Releases Wiki Activity

Cluster: sanity checks on the cluster bus message length.

Browse Source
This commit is contained in:
antirez 2013-02-15 16:44:39 +01:00
parent 6b9c661838
commit 02796ba7a7
2 changed files with 25 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
src/cluster.c
View File

@ -758,20 +758,33 @@ void clusterReadHandler(aeEventLoop *el, int fd, void *privdata, int mask) {
ssize_t nread;
clusterMsg *hdr;
clusterLink *link = (clusterLink*) privdata;
int readlen;
int readlen, rcvbuflen;
REDIS_NOTUSED(el);
REDIS_NOTUSED(mask);
again:
if (sdslen(link->rcvbuf) >= 4) {
hdr = (clusterMsg*) link->rcvbuf;
readlen = ntohl(hdr->totlen) - sdslen(link->rcvbuf);
rcvbuflen = sdslen(link->rcvbuf);
if (rcvbuflen < 4) {
/* First, obtain the first four bytes to get the full message
* length. */
readlen = 4 - rcvbuflen;
} else {
readlen = 4 - sdslen(link->rcvbuf);
/* Finally read the full message. */
hdr = (clusterMsg*) link->rcvbuf;
if (rcvbuflen == 4) {
/* Perform some sanity check on the message length. */
if (ntohl(hdr->totlen) < CLUSTERMSG_MIN_LEN) {
redisLog(REDIS_WARNING,
"Bad message length received from Cluster bus.");
handleLinkIOError(link);
return;
}
}
readlen = ntohl(hdr->totlen) - rcvbuflen;
}
nread = read(fd,buf,readlen);
if (nread == -1 && errno == EAGAIN) return; /* Just no data */
if (nread == -1 && errno == EAGAIN) return; /* No more data ready. */
if (nread <= 0) {
/* I/O error... */
@ -783,17 +796,19 @@ again:
/* Read data and recast the pointer to the new buffer. */
link->rcvbuf = sdscatlen(link->rcvbuf,buf,nread);
hdr = (clusterMsg*) link->rcvbuf;
rcvbuflen += nread;
}
/* Total length obtained? read the payload now instead of burning
* cycles waiting for a new event to fire. */
if (sdslen(link->rcvbuf) == 4) goto again;
if (rcvbuflen == 4) goto again;
/* Whole packet in memory? We can process it. */
if (sdslen(link->rcvbuf) == ntohl(hdr->totlen)) {
if (rcvbuflen == ntohl(hdr->totlen)) {
if (clusterProcessPacket(link)) {
sdsfree(link->rcvbuf);
link->rcvbuf = sdsempty();
rcvbuflen = 0; /* Useless line of code currently... defensive. */
}
}
}

2
src/redis.h
View File

@ -637,6 +637,8 @@ typedef struct {
union clusterMsgData data;
} clusterMsg;
#define CLUSTERMSG_MIN_LEN (sizeof(clusterMsg)-sizeof(union clusterMsgData))
/*-----------------------------------------------------------------------------
* Global server state
*----------------------------------------------------------------------------*/