Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Read/Write key pattern selector (CVE-2024-51741) #1514

Merged
merged 1 commit into from
Jan 6, 2025

Conversation

madolson
Copy link
Member

@madolson madolson commented Jan 6, 2025

The explanation on the original commit was wrong. Key based access must have a ~ in order to correctly configure whey key prefixes to apply the selector to. If this is missing, a server assert will be triggered later.

The '%' rule must contain one or both of R/W

Signed-off-by: Madelyn Olson <[email protected]>
@madolson madolson requested review from hpatro and hwware January 6, 2025 21:20
Copy link

codecov bot commented Jan 6, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 70.85%. Comparing base (e48317e) to head (76f05e5).
Report is 29 commits behind head on unstable.

Additional details and impacted files
@@             Coverage Diff              @@
##           unstable    #1514      +/-   ##
============================================
+ Coverage     70.82%   70.85%   +0.02%     
============================================
  Files           119      120       +1     
  Lines         64689    64913     +224     
============================================
+ Hits          45815    45992     +177     
- Misses        18874    18921      +47     
Files with missing lines Coverage Δ
src/acl.c 88.78% <100.00%> (+0.01%) ⬆️

... and 40 files with indirect coverage changes

tests/unit/acl-v2.tcl Show resolved Hide resolved
@madolson madolson merged commit 7977c55 into valkey-io:unstable Jan 6, 2025
50 checks passed
@madolson madolson deleted the CVE_2 branch January 6, 2025 22:02
madolson added a commit to madolson/valkey that referenced this pull request Jan 6, 2025
The explanation on the original commit was wrong. Key based access must
have a `~` in order to correctly configure whey key prefixes to apply
the selector to. If this is missing, a server assert will be triggered
later.

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: YaacovHazan <[email protected]>
hpatro pushed a commit to hpatro/valkey that referenced this pull request Jan 6, 2025
The explanation on the original commit was wrong. Key based access must
have a `~` in order to correctly configure whey key prefixes to apply
the selector to. If this is missing, a server assert will be triggered
later.

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: YaacovHazan <[email protected]>
madolson added a commit to madolson/valkey that referenced this pull request Jan 7, 2025
The explanation on the original commit was wrong. Key based access must
have a `~` in order to correctly configure whey key prefixes to apply
the selector to. If this is missing, a server assert will be triggered
later.

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: YaacovHazan <[email protected]>
madolson added a commit that referenced this pull request Jan 7, 2025
The explanation on the original commit was wrong. Key based access must
have a `~` in order to correctly configure whey key prefixes to apply
the selector to. If this is missing, a server assert will be triggered
later.

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: YaacovHazan <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Backported
Status: Done
Development

Successfully merging this pull request may close these issues.

3 participants