[UNDERTOW-2056][UNDERTOW-2075][UNDERTOW-2076][UNDERTOW-2077][UNDERTOW-2137] CVE-2022-1259 and related fixes #1483
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… by a timeout task
…* variables before resuming suspending. Signed-off-by: Flavia Rainone <frainone@redhat.com>
Signed-off-by: Flavia Rainone <frainone@redhat.com>
…buffers are consumed
…ractFramedChannel: suspend is done asap (if in IO thread it's executed immediately, scheduled if not), resume is always postponed to the IO thread. The boolean vars can be updated immediately but then we need synch all modifications, that update can be in IO thread or not, so synch is needed. We cannot do this in the freed method as we cannot synch on this. So for that case the var is also updated in the IO thread. Signed-off-by: Flavia Rainone <frainone@redhat.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport CVE-2022-1259 from master branch to 2.2.x (#1477)
Jiras:
https://issues.redhat.com/browse/UNDERTOW-2056
https://issues.redhat.com/browse/UNDERTOW-2075
https://issues.redhat.com/browse/UNDERTOW-2076
https://issues.redhat.com/browse/UNDERTOW-2077
https://issues.redhat.com/browse/UNDERTOW-2137