[esnet/iperf] 3f66f6: Add a variant of cJSON_GetObjectItem that does typ...

[swlars]

Branch: refs/heads/IP-282
Home: https://github.com/esnet/iperf
Commit: 3f66f604df7f1038a49108c48612c2f4fe71331f
https://github.com/esnet/iperf/commit/3f66f604df7f1038a49108c48612c2f4fe71331f
Author: Sarah Larsen <swla...@es.net>
Date: 2024-12-13 (Fri, 13 Dec 2024)

Changed paths:
M src/iperf_api.c
M src/iperf_error.c
M src/iperf_util.c
M src/iperf_util.h

Log Message:
-----------
Add a variant of cJSON_GetObjectItem that does type-checking.

This avoids a potential server crash with malformed iperf3
parameter sets. (CVE-2024-53580)

Vulnerability report submitted by Leonid Krolle Bi.Zone.

Original version of fix by @dopheide-esnet.



To unsubscribe from these emails, change your notification settings at https://github.com/esnet/iperf/settings/notifications

[Bruce A. Mah]

Branch: refs/heads/master

Home: https://github.com/esnet/iperf
Commit: 3f66f604df7f1038a49108c48612c2f4fe71331f
https://github.com/esnet/iperf/commit/3f66f604df7f1038a49108c48612c2f4fe71331f
Author: Sarah Larsen <swla...@es.net>
Date: 2024-12-13 (Fri, 13 Dec 2024)

Changed paths:
M src/iperf_api.c
M src/iperf_error.c
M src/iperf_util.c
M src/iperf_util.h

Log Message:
-----------
Add a variant of cJSON_GetObjectItem that does type-checking.

This avoids a potential server crash with malformed iperf3
parameter sets. (CVE-2024-53580)

Vulnerability report submitted by Leonid Krolle Bi.Zone.

Original version of fix by @dopheide-esnet.

Commit: 7a77e526bb1ccfd09248834abd5afe209f78bbe8
https://github.com/esnet/iperf/commit/7a77e526bb1ccfd09248834abd5afe209f78bbe8
Author: Bruce A. Mah <bm...@es.net>

Date: 2024-12-13 (Fri, 13 Dec 2024)

Changed paths:
M src/iperf_api.c
M src/iperf_error.c
M src/iperf_util.c
M src/iperf_util.h

Log Message:
-----------

Merge pull request #1810 from esnet/IP-282

Add a variant of cJSON_GetObjectItem that does type-checking.

Compare: https://github.com/esnet/iperf/compare/d595ee6cc4db...7a77e526bb1c