https://github.com/apache/trafficserver/blob/52f5151969eace2d33c075ea685674ecfe264324/mgmt/LocalManager.cc#L419-L424

After the 2nd call of `mgmt_read_pipe`, it doesn't check if we were able to 
read a whole message (res == mh_hdr.data_len). It can cause a buffer-over-flow 
in `Alarms::signalAlarm` when `ink_strlcpy` is called.

We should probably wait until it will be able to read a whole message.

[ Full content available at: 
https://github.com/apache/trafficserver/issues/4298 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to