From: Tristan Madani <[email protected]> Two input validation fixes for ovsdb-server:
1. raft: reject append_request with prev_log_index UINT64_MAX to prevent integer wrap and out-of-bounds array access. 2. jsonrpc-server: add missing params count check for monitor V1 requests (V2 and V3 already validate). Both against current main. Tristan Madani (2): raft: reject append_request with prev_log_index that wraps around jsonrpc-server: validate monitor v1 params count ovsdb/jsonrpc-server.c | 3 ++- ovsdb/raft.c | 8 ++++++++ 2 files changed, 10 insertions(+), 1 deletion(-) -- 2.53.0 _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
