server crashes on incorrect operation type

Bug #1009992 reported by Dmitry Simonenko
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tarantool
Fix Released
Medium
Dmitry Simonenko

Bug Description

no check is made for u32 op to be in valid range:

box_process_rw(struct txn *txn, Port *port,
77 u32 op, struct tbuf *data)
78 {
79 ev_tstamp start = ev_now(), stop;
80
81 stat_collect(stat_base, op, 1);
82
83 @try {
84 Request *request = [[Request build: op] init: data];
85 [request execute: txn :port];
(gdb) l
86 txn_commit(txn);
87 }
88 @catch (id e) {
89 txn_rollback(txn);
90 @throw;
91 }

Revision history for this message
Dmitry Simonenko (pmwkaa) wrote :

fix pushed on the branch bug1009992

Changed in tarantool:
status: New → Fix Committed
assignee: nobody → Dmitry Simonenko (pmwkaa)
Kostja Osipov (kostja)
Changed in tarantool:
status: Fix Committed → Fix Released
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.