[ 
https://issues.apache.org/jira/browse/QPID-3227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13025407#comment-13025407
 ] 

[email protected] commented on QPID-3227:
-----------------------------------------------------


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/667/
-----------------------------------------------------------

Review request for qpid, Andrew Stitcher, Gordon Sim, and Chug Rolke.


Summary
-------

Prevents buffer overflow bug by explicitly allowing RdmaIO layer to reserve 
header space in send buffers.  


This addresses bug QPID-3227.
    https://issues.apache.org/jira/browse/QPID-3227


Diffs
-----

  /trunk/qpid/cpp/src/qpid/sys/rdma/RdmaIO.cpp 1096872 
  /trunk/qpid/cpp/src/qpid/sys/rdma/rdma_wrap.h 1096872 
  /trunk/qpid/cpp/src/qpid/sys/rdma/rdma_wrap.cpp 1096872 

Diff: https://reviews.apache.org/r/667/diff


Testing
-------

unit tests & scale testing (by hand using perftest).


Thanks,

Kenneth



> rdma layer may allow overrun of send buffers
> --------------------------------------------
>
>                 Key: QPID-3227
>                 URL: https://issues.apache.org/jira/browse/QPID-3227
>             Project: Qpid
>          Issue Type: Bug
>          Components: C++ Broker
>    Affects Versions: 0.10
>            Reporter: Ken Giusti
>            Assignee: Ken Giusti
>             Fix For: 0.11
>
>         Attachments: QPID-3227.patch
>
>
> The rdma driver adds a small trailer to outbound buffers, however the size of 
> this header is not accounted for when the buffer's size is passed to the 
> codec.  If the codec fills all available buffer space, the rdma driver will 
> overwrite the end of the buffer when adding the trailer.
> Kudos to Chuck Rolke for helping root-cause this bug!

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:[email protected]

Reply via email to