Skip to content

Add value length check for preventing buffer overflow #11102

@7erryX

Description

@7erryX

OSV-2020-2014

flb_msgpack_to_gelf in src/flb_pack_gelf.c once caused buffer overflow and was fixed in Commit 4e7894d

Recurring vulnerabilities

The same issues advent in:

  • influxdb_format in plugins/out_influxdb/influxdb.c
  • pack_format_line_value in plugins/out_loki/loki.c
  • msgpack_to_sd in plugins/out_syslog/syslog.c
  • msgpack_to_syslog in plugins/out_syslog/syslog.c

Would it make sense to fix them by adding a value length check in the same way as Commit 4e7894d did?

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions