Project

General

Profile

Actions
Copy link

Bug #14526

closed

rgw: parsing Swift ACLs may be dangerous in multi-thread environment

Added by Radoslaw Zarzynski over 8 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Radoslaw Zarzynski
Target version:
-
% Done:

0%

Source:
Development
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

RGWAccessControlPolicy_SWIFT::create method calls parse_list function. It uses strtok to tokenize a string. This isn't thread-safe and could be dangerous because of sharing a global state. strtok_r should be used instead.

Actions
Copy link

Also available in: Atom PDF