3 ms·
afaict, the issue is in amqp_handle_input()[1]. The fix was > "add additional input validation to prevent integer overflow when parsing a frame header" Wouldn
by DyslexicAtheist 7y ago
afaict, the issue is in amqp_handle_input()[1]. The fix was
> "add additional input validation to prevent integer overflow when parsing a frame header"
Wouldn't this be a bug in the MQ and not in the C library?
[1] https://github.com/alanxz/rabbitmq-c/commit/fc85be7123050b91b054e45b91c78d3241a5047a https://github.com/alanxz/rabbitmq-c/commit/fc85be7123050b91...
EDIT: sorry I just realized this is an internal rabbit MQ (C) library, I misunderstood the reference to "C library" thinking it meant the systems g/libc
- tonyg 7y agoNope. It's the C library's problem: who is to say which AMQP implementation is at the other end of the socket?
- DyslexicAtheist 7y agothanks for clarifying, my bad (I misread the meaning of C library)