Permalink
Show file tree
Hide file tree
47 changes: 44 additions & 3 deletions
47
thrift/lib/java/src/main/java/com/facebook/thrift/protocol/TBinaryProtocol.java
35 changes: 33 additions & 2 deletions
35
thrift/lib/java/src/main/java/com/facebook/thrift/protocol/TCompactProtocol.java
27 changes: 27 additions & 0 deletions
27
thrift/lib/java/src/main/java/com/facebook/thrift/protocol/TProtocol.java
5 changes: 5 additions & 0 deletions
5
thrift/lib/java/src/main/java/com/facebook/thrift/protocol/TProtocolDecorator.java
15 changes: 14 additions & 1 deletion
15
thrift/lib/java/src/resources/testing_data_structures.thrift
6 changes: 3 additions & 3 deletions
6
thrift/lib/java/src/test/java/com/facebook/thrift/StructTest.java
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Browse files
Browse the repository at this point in the history
Java: Check the size of the remaining frame before deserializing coll…
…ection Summary: In order to avoid over-allocating memory for malformed or truncated frame, we ensure that we have enough data (we only check for the lower bound) in the current frame. This is a partial fix for CVE-2019-11938. Reviewed By: vitaut Differential Revision: D14500775 fbshipit-source-id: ca8b38965514d6319addcb72c8999a6854a94a88
- Loading branch information
1 parent
0076bf7
commit 71c97ff
Showing
7 changed files
with
414 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.