Skip to content

fix(scripting): sanitize lua error replies#3494

Merged
jihuayu merged 3 commits into
apache:unstablefrom
jihuayu:codex/fix-lua-error-reply-injection
May 20, 2026
Merged

fix(scripting): sanitize lua error replies#3494
jihuayu merged 3 commits into
apache:unstablefrom
jihuayu:codex/fix-lua-error-reply-injection

Conversation

@jihuayu
Copy link
Copy Markdown
Member

@jihuayu jihuayu commented May 19, 2026

fix #3493

Lua's error return poses an injection risk; see issues for details.

I used codex gpt-5.5 to fix it.

@jihuayu jihuayu requested review from PragmaTwice and git-hulk May 19, 2026 09:23
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
39.0% Coverage on New Code (required ≥ 50%)

See analysis details on SonarQube Cloud

@jihuayu jihuayu merged commit 27a6d8a into apache:unstable May 20, 2026
38 of 39 checks passed
nkroker pushed a commit to nkroker/kvrocks that referenced this pull request May 29, 2026
fix apache#3493


Lua's error return poses an injection risk; see issues for details.

I used codex gpt-5.5 to fix it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Security] RESP Protocol Injection via Lua redis.error_reply() in scripting.cc

2 participants