Skip to content

fix stack-use-after-scope in the unauthenticated-peer reply - #49

Open
Eusgor wants to merge 1 commit into
LINBIT:masterfrom
Eusgor:fix-inet-ntop-stack-use-after-scope
Open

Eusgor wants to merge 1 commit into
LINBIT:masterfrom
Eusgor:fix-inet-ntop-stack-use-after-scope

Conversation

@Eusgor

@Eusgor Eusgor commented Sep 25, 2026

Copy link
Copy Markdown

csync_inet_ntop() returned the address of its own stack buffer. conn_printf() read that pointer after the callee returned, which AddressSanitizer reports when a command arrives before HELLO.

csync_inet_ntop() returned the address of its own stack buffer.
conn_printf() read that pointer after the callee returned, which
AddressSanitizer reports when a command arrives before HELLO.

Signed-off-by: Evgeniy Gorbanyov <esgor@altlinux.org>
bes-internal added a commit to bes-internal/gentoo-overlay-bes that referenced this pull request Sep 25, 2026
…e-auth reply

Adds LINBIT/csync2#49 as a separate patch file; README notes it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant