antirez
e89086e09a
Security: fix Lua struct package offset handling.
...
After the first fix to the struct package I found another similar
problem, which is fixed by this patch. It could be reproduced easily by
running the following script:
return struct.unpack('f', "xxxxxxxxxxxxx",-3)
The above will access bytes before the 'data' pointer.
2018-06-13 12:40:33 +02:00
..
2014-11-14 17:08:33 +01:00
2014-11-14 17:08:44 +01:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2015-06-03 13:33:28 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2014-10-09 11:51:30 -04:00
2014-11-14 17:16:23 +01:00
2018-06-13 12:40:33 +02:00
2018-06-13 12:40:33 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2013-04-29 12:00:54 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2011-05-25 12:32:43 +02:00
2014-11-14 17:10:48 +01:00
2011-05-25 12:32:43 +02:00
2014-11-14 17:08:33 +01:00
2014-11-14 17:08:33 +01:00