* MOD-16514 - fix the bootstrap and build (#1028)
* install aws if and only if it is not installed yet
* add another build fixes
* fix build for amazonlinux2
* fix(al2): add cc symlink to devtoolset-11 to fix LTO version mismatch
* alma8 +rhel8+rhel9+bionic +focal passes
* fix for bionic
* fix
* bump rltest
* fix bionic bootstrap
* fix azurelinux3
* bionic fix
* fix for bullesye
* fix focal ci
* fix the test due to bump rltest version
* fix for bionic and focal
* fix
* fix remarks
* try another methood (#1030)
* MOD-16871: replicate in `cfInsertCommon` after `cfCreate` in case of errors (#1034)
* MOD-16871: relicate in after
* .
* MOD-16306 - pull docker images from registry (#1036)
* MOD-16306 - pull docker images from registry
* cherry pick changes to bloom
* MOD-13409 Harden RDB loading (#1038)
* MOD-13409 Validate Bloom RDB bitset size on load (#126)
* MOD-13409 Validate Bloom RDB bitset size on load
Reject crafted module payloads where the loaded bloom bitset buffer length does not match the declared bits/n2, and add a flow regression test covering RESTORE with a corrupted DUMP payload.
* MOD-13409 clang-format rebloom.c
Run clang-format on rebloom.c to satisfy make lint formatting checks.
* MOD-13409 Validate Bloom RDB bitset length on load
Reject crafted module payloads where persisted bits do not match the loaded bitset buffer length, preventing OOB access after RESTORE.
* Mod 13409 rdb hardening (#127)
* MOD-13409 clang-format rebloom.c
Run clang-format on rebloom.c to satisfy make lint formatting checks.
* MOD-13409 Harden CF RDB load buffer validation
Replace assert-only checks in CFRdbLoad with explicit validation of loaded sizes and ranges, and add a flow test that corrupts a CF DUMP payload to ensure RESTORE is rejected.
* MOD-13409 Harden remaining RDB loaders (TDigest)
TDigest RDB loading trusted attacker-controlled cap, which could desync the allocated centroid arrays from the loaded metadata and enable OOB access after RESTORE.
Reject payloads where loaded cap differs from the allocated cap derived from compression, validate node counters, and add a flow regression that corrupts a TDigest DUMP payload and asserts RESTORE is rejected.
With the earlier BF/CF fixes, this covers all remaining module data structures that load raw buffers from RDB/RESTORE (CMS/TopK already validate buffer sizes).
* Revert "MOD-13409 clang-format rebloom.c"
This reverts commit 456e53503f51b68c4d7a9df988e50a36adf2e61a.
* MOD-13409 Add regression for published P88W exploit
* MOD-13409 Share RDB corruption test helpers
* Fix TDigest RDB load node count overflow check
Avoid signed overflow when validating merged and unmerged node counts by widening the addition.
* MOD-16952 - enhance bootstrap (add list and dry-run arg) (#1037)
* add bootstrap dry-run and chrck-deps
* remove dry-run
* write list to afile
* add optional deps
* add another optional deps
* add another optional deps
* add versioning managment
* rename command to list
* renme to list
* add dry run
* fix colors
* fix bloom missing deps only for dry run
* fix missing
* remove min cmake version
* fix remarks
* fix remarks
* fix remarks
* fix remarks
* fix remarks
* add _sh so we can have the full bootstrap output
* always return to the workspace dir
* make single copy paste install all
* fix alma8
* fix bad dry-run print
* gaurd tool-set version 11
* fix curl minimal
* remove centos-release-scl for amazonlinux2
* fix macos env
* fix(bootstrap): make sudo a no-op on root containers without a sudo binary
The install scripts run privileged steps via literal `sudo` inside `_sh`
command strings (e.g. `sudo ln -sf ...`, `| sudo tee`, `&& sudo make install`).
On a slim Docker image that runs install_script.sh directly as root with no
`sudo` package installed (e.g. RedisTimeSeries' amazonlinux2 CI), those steps
fail with `sudo: command not found` (exit 127), aborting the whole bootstrap.
Add a root-only pass-through in pm.sh/deps_lib.sh: when running as root and no
real `sudo` binary exists, define `sudo()` to run its arguments directly. When
not root, a missing sudo stays a genuine error and is left unmasked.
* bump version to 8.10.0
---------
Co-authored-by: Aviv David <40210928+AvivDavid23@users.noreply.github.com>
Co-authored-by: Tom Gabsow <tom.gabsow@redis.com>
