[
https://issues.apache.org/jira/browse/PROTON-2853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17883360#comment-17883360
]
ASF subversion and git services commented on PROTON-2853:
---------------------------------------------------------
Commit e3e9df66fd8587bc3d139543037c0e0b70f5217c in qpid-proton's branch
refs/heads/main from Andrew Stitcher
[ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=e3e9df66f ]
PROTON-2853: Fix potential DoS found by fuzzer
> Undefined behaviour found by fuzzing transfer frame
> ---------------------------------------------------
>
> Key: PROTON-2853
> URL: https://issues.apache.org/jira/browse/PROTON-2853
> Project: Qpid Proton
> Issue Type: Bug
> Components: proton-c
> Affects Versions: proton-c-0.39.0
> Reporter: Andrew Stitcher
> Assignee: Andrew Stitcher
> Priority: Major
>
> Fuzzing found that if an initial transfer frame has no (or an invalid)
> delivery id no error is raised but in debug mode an assertion would be
> tripped.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]