mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-10 09:07:02 +02:00
dc70c18ddc
Oss-fuzz reports in issue 36328 that we can recurse too far by passing extremely deep expressions to the ".if" parser. I thought we were still limited to the 1024 chars per line, that would be highly sufficient, but we don't have any limit now :-/ Let's just pass a maximum recursion counter to the recursive parsers. It's decremented for each call and the expression fails if it reaches zero. On the most complex paths it can add 3 levels per parenthesis, so with a limit of 1024, that's roughly 343 nested sub-expressions that are supported in the worst case. That's more than sufficient, for just a few kB of RAM. No backport is needed.
44 lines
1.8 KiB
C
44 lines
1.8 KiB
C
/*
|
|
* include/haproxy/cfgcond.h
|
|
* Configuration condition preprocessor
|
|
*
|
|
* Copyright (C) 2000-2021 Willy Tarreau - w@1wt.eu
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation, version 2.1
|
|
* exclusively.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#ifndef _HAPROXY_CFGCOND_H
|
|
#define _HAPROXY_CFGCOND_H
|
|
|
|
#include <haproxy/api.h>
|
|
#include <haproxy/cfgcond-t.h>
|
|
|
|
const struct cond_pred_kw *cfg_lookup_cond_pred(const char *str);
|
|
int cfg_parse_cond_term(const char **text, struct cfg_cond_term **term, char **err, const char **errptr, int maxdepth);
|
|
int cfg_eval_cond_term(const struct cfg_cond_term *term, char **err);
|
|
void cfg_free_cond_term(struct cfg_cond_term *term);
|
|
|
|
int cfg_parse_cond_and(const char **text, struct cfg_cond_and **expr, char **err, const char **errptr, int maxdepth);
|
|
int cfg_eval_cond_and(struct cfg_cond_and *expr, char **err);
|
|
void cfg_free_cond_and(struct cfg_cond_and *expr);
|
|
|
|
int cfg_parse_cond_expr(const char **text, struct cfg_cond_expr **expr, char **err, const char **errptr, int maxdepth);
|
|
int cfg_eval_cond_expr(struct cfg_cond_expr *expr, char **err);
|
|
void cfg_free_cond_expr(struct cfg_cond_expr *expr);
|
|
|
|
int cfg_eval_condition(char **args, char **err, const char **errptr);
|
|
|
|
#endif
|