27 lines
630 B
Diff
27 lines
630 B
Diff
From 78a8af37c6fc43e5fe4487a7a0762c9473444e37 Mon Sep 17 00:00:00 2001
|
|
From: lingsheng <lingsheng@huawei.com>
|
|
Date: Fri, 4 Jun 2021 11:05:20 +0800
|
|
Subject: [PATCH] fix heap buffer overflow in redisvFormatCommand
|
|
|
|
---
|
|
hiredis.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/hiredis.c b/hiredis.c
|
|
index 73d0251..af3a079 100644
|
|
--- a/hiredis.c
|
|
+++ b/hiredis.c
|
|
@@ -375,6 +375,9 @@ int redisvFormatCommand(char **target, const char *format, va_list ap) {
|
|
|
|
touched = 1;
|
|
c++;
|
|
+ if (*c == '\0') {
|
|
+ goto format_err;
|
|
+ }
|
|
}
|
|
c++;
|
|
}
|
|
--
|
|
2.23.0
|
|
|