libvbucket should validate vbucket indices before performing lookup

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Won't Fix
Affects Version/s: 2.0.1
Fix Version/s: 2.0.3
Component/s: library
Security Level: Public
Labels:
None

Description

Otherwise, this will cause a segfault and buffer overrun;
e.g. vb=44444 should raise an error rather than crash

Activity

Ascending order - Click to sort in descending order

Hide

Permalink

Matt Ingenthron added a comment - 29/Jan/13 4:36 PM

Also, anything <0.

Show

Matt Ingenthron added a comment - 29/Jan/13 4:36 PM Also, anything <0.

Hide

Permalink

Sergey Avseyev added a comment - 31/Jan/13 2:28 AM

It cannot return negative value or something too big

https://github.com/couchbase/libcouchbase/blob/master/contrib/libvbucket/vbucket.c#L705-L711

Show

Sergey Avseyev added a comment - 31/Jan/13 2:28 AM It cannot return negative value or something too big https://github.com/couchbase/libcouchbase/blob/master/contrib/libvbucket/vbucket.c#L705-L711

People

Assignee:

Sergey Avseyev

Reporter:

Mark Nunberg

Vote (0)

Watch (0)

Dates

Created:

27/Dec/12 11:57 AM

Updated:

06/Feb/13 1:48 PM

Resolved:

31/Jan/13 2:28 AM

Agile

View on Board