Project

General

Profile

Actions
Copy link

Bug #1053

closed

rgw XML parsing exploits and flaws

Added by Colin McCabe almost 13 years ago. Updated almost 13 years ago.

Status:
Resolved
Priority:
High
Assignee:
Colin McCabe
Category:
-
Target version:
v0.28
% Done:

100%

Source:
Tags:
Backport:
Regression:
Severity:
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

RGW must never segfault on bad network input. It should handle optional XML fields.

Subtasks 1 (0 open — 1 closed)

Tasks #1055: RGW segfaults if the Owner field is not set in an ACL (subtask)ResolvedColin McCabe05/04/2011

Actions
Actions
Copy link

Also available in: Atom PDF