Special Redis commands can cause the Dragonfly service to crash #4466
Assignees
Labels
bug
Something isn't working
Comments
|
Hi @ankki-zsyang , Thank you for reporting this! We will take a look :) |
romange
added a commit
that referenced
this issue
Jan 24, 2025
1. Fixes #4466 (we did not check validity of the scan cursor) We fix it by quietly returning "end of scan" result, i.e. no error are returned. 2. Add 34b1048274c8e50a0cc587a3ed9c383a82bb78c5 sha to the lua_undeclared_keys_shas list. 3. Pull helio that fixes bugs with WaitQueue and IdleTasks: romange/helio@2ab4412
Merged
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Summary
Authenticated users can construct specific commands that cause the dragonfly service to crash.
Details
Dragonfly version: df-v1.26.1
Payload:
SCAN 9223372036854775808 MATCH *11*Executing the above payload will cause the dragonfly service to crash immediately.
Poof:
Reporter
The problem was reported by ankki-zsyang, Shenzhen Ankki Technologies Co.Ltd.
The text was updated successfully, but these errors were encountered: