Skip to content

[v2.9] Backport CVE-2024-10964: plugin: buffer overflow in library strcpy - #2737

Open
vulgraph wants to merge 1 commit into
emqx:v2.9from
vulgraph:backport/CVE-2024-10964-v2.9
Open

vulgraph wants to merge 1 commit into
emqx:v2.9from
vulgraph:backport/CVE-2024-10964-v2.9

Conversation

@vulgraph

Copy link
Copy Markdown

Two-line strcpy→strncpy swap in handle_add_plugin and handle_update_plugin to bound the copy into cmd.library[NEU_PLUGIN_LIBRARY_LEN].

Upstream 3e3a583 also interleaves the new header.otel_trace_type telemetry field (introduced with OTEL tracing support later on master). Since v2.9 has no OTEL tracing yet, I kept the surrounding struct init as-is and only applied the security change. NEU_PLUGIN_LIBRARY_LEN is already defined on v2.9 at include/neuron/define.h:43.

Fix originally by @xiang.zhou, preserved via cherry-pick -x.

(cherry picked from commit 3e3a583)
@vulgraph

vulgraph commented May 2, 2026

Copy link
Copy Markdown
Author

Thanks @hxy7yx for the review and approval — ready when you have a moment to merge.

@vulgraph

vulgraph commented May 3, 2026

Copy link
Copy Markdown
Author

Thanks @hxy7yx for the review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants