[jira] [Commented] (PROTON-2853) Undefined behaviour found by fuzzing transfer frame

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/PROTON-2853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17883360#comment-17883360 ] 

ASF subversion and git services commented on PROTON-2853:
---------------------------------------------------------

Commit e3e9df66fd8587bc3d139543037c0e0b70f5217c in qpid-proton's branch refs/heads/main from Andrew Stitcher
[ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=e3e9df66f ]

PROTON-2853: Fix potential DoS found by fuzzer


> Undefined behaviour found by fuzzing transfer frame
> ---------------------------------------------------
>
>                 Key: PROTON-2853
>                 URL: https://issues.apache.org/jira/browse/PROTON-2853
>             Project: Qpid Proton
>          Issue Type: Bug
>          Components: proton-c
>    Affects Versions: proton-c-0.39.0
>            Reporter: Andrew Stitcher
>            Assignee: Andrew Stitcher
>            Priority: Major
>
> Fuzzing found that if an initial transfer frame has no (or an invalid) delivery id no error is raised but in debug mode an assertion would be tripped.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org