Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. #1376

Merged
merged 3 commits into from May 15, 2023
Merged

This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. #1376

merged 3 commits into from May 15, 2023

Commits on Mar 10, 2023

  1. This commit fixes a potential denial of service vulnerability in logr… 

    …us.Writer() that could be triggered by logging text longer than 64kb without newlines. Previously, the bufio.Scanner used by Writer() would hang indefinitely when reading such text without newlines, causing the application to become unresponsive.
    @ozfive
    ozfive committed Mar 10, 2023
    Configuration menu
    Copy the full SHA
    766cfec View commit details
    Browse the repository at this point in the history

Commits on May 4, 2023

  1. Scan text in 64KB chunks 

    This commit fixes a potential denial of service
vulnerability in logrus.Writer() that could be
triggered by logging text longer than 64KB
without newlines. Previously, the bufio.Scanner
used by Writer() would hang indefinitely when
reading such text without newlines, causing the
application to become unresponsive.
    @ozfive @ashmckenzie
    ozfive authored and ashmckenzie committed May 4, 2023
    Configuration menu
    Copy the full SHA
    c052ba6 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1 from ashmckenzie/ashmckenzie/fix-writer-scanner 

    Scan text in 64KB chunks
    @ozfive
    ozfive committed May 4, 2023
    Configuration menu
    Copy the full SHA
    105e63f View commit details
    Browse the repository at this point in the history