mirror of
https://github.com/lxc/incus
synced 2026-08-02 05:26:46 +00:00
42278bd2b5
Fuzzing by the 7asecurity team has discovered a few issues with our handling of compressed images and backups. This fixes 3 different issues: - We weren't checking that 0 bytes at the trailing end of a header were in fact 0 in the file itself (checking read length). - In case of unpacker error, the client may hang reading from the uncompressed pipe unless it implements its own timeout/context mechanism calling the canceler. - The signature of an uncompressed tarball is based on trailing bytes and so should be checked after all of those using leading bytes. No crashes would result from such bad input but some of the consumers of those archive functions would be left hanging indefinitely, wasting a few goroutines. Reported-by: https://7asecurity.com Signed-off-by: Stéphane Graber <stgraber@stgraber.org> |
||
|---|---|---|
| .. | ||
| api | ||
| archive | ||
| ask | ||
| cancel | ||
| cgo | ||
| cliconfig | ||
| cmd | ||
| idmap | ||
| ioprogress | ||
| logger | ||
| osarch | ||
| proxy | ||
| resources | ||
| revert | ||
| scriptlet | ||
| simplestreams | ||
| subprocess | ||
| tcp | ||
| termios | ||
| tls | ||
| units | ||
| util | ||
| validate | ||
| ws | ||
