]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4f9664c) | patch
rgw: asio: check the remote endpoint before processing requests 30977/head
authorAbhishek Lekshmanan <abhishek@suse.com>
Wed, 7 Aug 2019 15:09:32 +0000 (17:09 +0200)
committerAbhishek Lekshmanan <abhishek@suse.com>
Thu, 17 Oct 2019 15:18:12 +0000 (17:18 +0200)
commitc680cff2872121c30565c28a717dcc92199dc11c
treed116c1ef291681910e583aa5cad9aa3854f4b898tree | snapshot
parent4f9664c91b970c5d6924116eea77fd936807d3adcommit | diff
rgw: asio: check the remote endpoint before processing requests

`socket.remote_endpoint()` can throw exceptions corresponding to errors in the
`getpeername` syscall, make sure these are handled.

Fixes: CVE-2019-10222, https://tracker.ceph.com/issues/40018
Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
(cherry picked from commit caa653196856ecdf50519a9a33195d5c4e3372af)

 Conflicts:
src/rgw/rgw_asio_frontend.cc
conflicts due to optional-yield-ctx changes in master
src/rgw/rgw_asio_frontend.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.