]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ba55405) | patch
rgw: asio: check the remote endpoint before processing requests 29975/head
authorAbhishek Lekshmanan <abhishek@suse.com>
Wed, 7 Aug 2019 15:09:32 +0000 (17:09 +0200)
committerAbhishek Lekshmanan <abhishek@suse.com>
Wed, 28 Aug 2019 16:09:22 +0000 (18:09 +0200)
commit29753dd3ca71bba8713fcf7a09c4bb51629a6f63
treec05aafbc0407b10db8de8c6bc61bae8e760192d2tree | snapshot
parentba55405704f414504c2e0da469ac9bef84017ab7commit | diff
rgw: asio: check the remote endpoint before processing requests

`socket.remote_endpoint()` can throw exceptions corresponding to errors in the
`getpeername` syscall, make sure these are handled.

Fixes: CVE-2019-10222, https://tracker.ceph.com/issues/40018
Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
(cherry picked from commit caa653196856ecdf50519a9a33195d5c4e3372af)

Conflicts:
src/rgw/rgw_asio_frontend.cc
conflicts due to missing yield ctx in nautilus
src/rgw/rgw_asio_frontend.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.