summaryrefslogtreecommitdiff
path: root/proto_text.c
diff options
context:
space:
mode:
authordormando <dormando@rydia.net>2022-01-11 23:46:32 -0800
committerdormando <dormando@rydia.net>2022-01-11 23:46:32 -0800
commit7af02b0c875a36c61875a332dda582375014cf44 (patch)
tree6bac39554c146f74e24ffb788c8c69cf254b19f2 /proto_text.c
parent7b4160c4062b208a0c975cf61aa41ee69ccac01d (diff)
downloadmemcached-7af02b0c875a36c61875a332dda582375014cf44.tar.gz
core: fix use-after-free for text multigets
Reported in #849 - this fixes copying a read buffer after freeing the original read buffer. This didn't matter for years since the cache code didn't touch the buffer, but recently it can reuse the first 8 bytes as a pointer to the internal freelist. Thus in some situations where large reads happen the command can get corrupted, returning an unhelpful "ERROR" to the end user.
Diffstat (limited to 'proto_text.c')
0 files changed, 0 insertions, 0 deletions