[GH] (kvrocks/fix/restore-intset-oob): Workflow run "CI" failed!

[GitBox <gi...@apache.org>]

The GitHub Actions job "CI" on kvrocks.git/fix/restore-intset-oob has failed.
Run started by GitHub user git-hulk (triggered by git-hulk).

Head commit for run:
e7e1badd6c2110693bf42526b30c1f8f9a501033 / git-hulk <hu...@gmail.com>
fix(rdb): reject malformed intset lengths

RESTORE loads intset contents from a length-prefixed RDB string. The
parser checked IntSetHeaderSize + len * record_size with 32-bit
arithmetic, so a large len could wrap the product and make a
header-only intset look correctly sized. It then entered the entry loop
and read beyond the provided input.

Before this patch, a RESTORE payload using int64 intset encoding and
len 0x20000000 timed out or terminated the server instead of returning
a parse error. After this patch, the same payload returns
ERR invalid intset length and the server continues to answer PING.

Validate the encoding before using it as a record size, compare the
declared length against the remaining payload without overflowing, and
keep a bounds check before each record read.

Report URL: https://github.com/apache/kvrocks/actions/runs/27412351272

With regards,
GitHub Actions via GitBox