msgpack: fix unsafe extension decoding
In some cases unsafe extension decoding was done without bound and type checks: add necessary checks. Closes tarantool/security#73 NO_DOC=bugfix
Showing
- changelogs/unreleased/ghs-73-unsafe-extensions-decoding.md 4 additions, 0 deletionschangelogs/unreleased/ghs-73-unsafe-extensions-decoding.md
- extra/exports 1 addition, 1 deletionextra/exports
- src/box/bind.c 1 addition, 1 deletionsrc/box/bind.c
- src/box/mp_error.cc 12 additions, 3 deletionssrc/box/mp_error.cc
- src/box/mp_error.h 7 additions, 11 deletionssrc/box/mp_error.h
- src/box/msgpack.c 2 additions, 2 deletionssrc/box/msgpack.c
- src/box/sql/mem.c 2 additions, 2 deletionssrc/box/sql/mem.c
- src/lib/core/decimal.c 14 additions, 2 deletionssrc/lib/core/decimal.c
- src/lib/core/mp_interval.c 34 additions, 12 deletionssrc/lib/core/mp_interval.c
- src/lib/core/mp_interval.h 6 additions, 3 deletionssrc/lib/core/mp_interval.h
- src/lua/msgpack.c 1 addition, 1 deletionsrc/lua/msgpack.c
- src/lua/msgpackffi.lua 6 additions, 6 deletionssrc/lua/msgpackffi.lua
- src/lua/tnt_datetime.c 2 additions, 2 deletionssrc/lua/tnt_datetime.c
- test/box-luatest/gh_6857_tuple_ext_validation_test.lua 15 additions, 5 deletionstest/box-luatest/gh_6857_tuple_ext_validation_test.lua
- test/unit/mp_error.cc 2 additions, 2 deletionstest/unit/mp_error.cc
Loading