Skip to content

v2.7: fix plugin library buffer overflow (CVE-2024-10964) - #2738

Open
vulgraph wants to merge 1 commit into
emqx:v2.7from
vulgraph:backport/CVE-2024-10964-v2.7
Open

vulgraph wants to merge 1 commit into
emqx:v2.7from
vulgraph:backport/CVE-2024-10964-v2.7

Conversation

@vulgraph

Copy link
Copy Markdown

Porting the same two strcpy → strncpy(..., NEU_PLUGIN_LIBRARY_LEN) swaps from 3e3a583 to the v2.7 line. Context is identical to master's; the only piece of the original diff that doesn't apply here is the header.otel_trace_type = NEU_OTEL_TRACE_TYPE_REST_COMM assignment — OTEL tracing was added after v2.7 so that field isn't defined on neu_reqresp_head_t yet. Dropped it; kept just the buffer-bounding change.

Net: 2 lines, both on the strncpy swap. Author credit to xiang.zhou via -x.

(cherry picked from commit 3e3a583)
@vulgraph

vulgraph commented May 2, 2026

Copy link
Copy Markdown
Author

Appreciated, @hxy7yx — confirmed mergeable=True on this one. Happy to coordinate timing.

@vulgraph

vulgraph commented May 3, 2026

Copy link
Copy Markdown
Author

Appreciate the approval, @hxy7yx.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants