Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don’t have the RTR listener fail if a socket fails after accept. #939

Merged
merged 3 commits into from
Feb 27, 2024

Conversation

partim
Copy link
Member

@partim partim commented Feb 27, 2024

This PR changes the RTR listener to not fail the accept loop when setting up a stream after accepting it fails. Instead it will quietly drop the stream in this case and keep going.

As part of this, the PR also drops tokio-stream as a dependency and implements its own listener stream.

This PR fixes CVE-2024-1622 reported by Yohei Nishimura, Atsushi Enomoto, Ruka Miyachi; Internet Multifeed Co., Japan.

This PR is a forward port of #937.

@partim partim merged commit 0aeb46a into main Feb 27, 2024
10 checks passed
@partim partim deleted the server-listen-fix branch February 27, 2024 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant