Actions
Bug #14526
closedrgw: parsing Swift ACLs may be dangerous in multi-thread environment
% Done:
0%
Source:
Development
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
RGWAccessControlPolicy_SWIFT::create method calls parse_list function. It uses strtok to tokenize a string. This isn't thread-safe and could be dangerous because of sharing a global state. strtok_r should be used instead.
Actions