Uploaded image for project: 'Couchbase C client library libcouchbase'
  1. Couchbase C client library libcouchbase
  2. CCBC-157

libvbucket should validate vbucket indices before performing lookup

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 2.0.1
    • Fix Version/s: 2.0.3
    • Component/s: library
    • Security Level: Public
    • Labels:
      None

      Description

      Otherwise, this will cause a segfault and buffer overrun;
      e.g. vb=44444 should raise an error rather than crash

      No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

        Hide
        ingenthr Matt Ingenthron added a comment -

        Also, anything <0.

        Show
        ingenthr Matt Ingenthron added a comment - Also, anything <0.
        Hide
        avsej Sergey Avseyev added a comment -
        Show
        avsej Sergey Avseyev added a comment - It cannot return negative value or something too big https://github.com/couchbase/libcouchbase/blob/master/contrib/libvbucket/vbucket.c#L705-L711

          People

          • Assignee:
            avsej Sergey Avseyev
            Reporter:
            mnunberg Mark Nunberg
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Gerrit Reviews

              There are no open Gerrit changes