Skip to content

Conversation

msotheeswaran-sc
Copy link
Collaborator

Multiple fixes related to rand commands from redis.

  1. Integer overflow in count Integer Overflow in RAND commands can lead to assertion (CVE-2023-25155) redis/redis#11857
  2. fix hincrbyfloat not to create a key if the new value is invalid fix hincrbyfloat not to create a key if the new value is invalid redis/redis#11149
  3. exit rand loop early if client is disconnected Obuf limit, exit during loop in *RAND* commands and KEYS redis/redis#11676

Also add config allowing user to set the limit on rand return count, based on discussion of issue on redis github redis/redis#11671.

Fixes #631. Fixes #632. Fixes #633. Fixes #634. Fixes #635. Fixes #636.

oranagra and others added 5 commits April 17, 2023 13:42
…55) (#11857)

Issue happens when passing a negative long value that greater than
the max positive value that the long can store.
…149)

Check the validity of the value before performing the create operation,
prevents new data from being generated even if the request fails to execute.

Co-authored-by: Oran Agra <[email protected]>
Co-authored-by: chendianqiang <[email protected]>
Co-authored-by: Binbin <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
4 participants