tree aae1cbd1e9392c62b4ea9a47c18cc9dba7216a22
parent 1b7f58fd2e3f20e2de14a79773d0d7b31f47ffb8
author Willy Tarreau <w@1wt.eu> 1592323094 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1594129657 +0200

BUG/MINOR: spoe: add missing key length check before checking key names

The spoe parser fails to check that the decoded key length is large
enough to match a given key but it uses the returned length in memcmp().
So returning "ver" could match "version" for example. In addition this
makes clang 10's ASAN complain because the second argument to memcmp()
is the static key which is shorter than the decoded buffer size, which
in practice has no impact.

I'm still not 100% sure the parser is entirely correct because even
with this fix it cannot parse a key whose name matches the beginning
of another one, but in practice this does not happen. Ideally a
preliminary length check before the comparison would be safer.

This needs to be backported as far as 1.7.

(cherry picked from commit da21ed1662ff7f1610db14b3ce48f19ec37a695b)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 52d4af0accaa9440c0434387ec29beac1816fdd0)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>