mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-09-23 06:41:32 +02:00
da21ed1662
The spoe parser fails to check that the decoded key length is large enough to match a given key but it uses the returned length in memcmp(). So returning "ver" could match "version" for example. In addition this makes clang 10's ASAN complain because the second argument to memcmp() is the static key which is shorter than the decoded buffer size, which in practice has no impact. I'm still not 100% sure the parser is entirely correct because even with this fix it cannot parse a key whose name matches the beginning of another one, but in practice this does not happen. Ideally a preliminary length check before the comparison would be safer. This needs to be backported as far as 1.7.
The HAProxy documentation has been split into a number of different files for ease of use. Please refer to the following files depending on what you're looking for : - INSTALL for instructions on how to build and install HAProxy - BRANCHES to understand the project's life cycle and what version to use - LICENSE for the project's license - CONTRIBUTING for the process to follow to submit contributions The more detailed documentation is located into the doc/ directory : - doc/intro.txt for a quick introduction on HAProxy - doc/configuration.txt for the configuration's reference manual - doc/lua.txt for the Lua's reference manual - doc/SPOE.txt for how to use the SPOE engine - doc/network-namespaces.txt for how to use network namespaces under Linux - doc/management.txt for the management guide - doc/regression-testing.txt for how to use the regression testing suite - doc/peers.txt for the peers protocol reference - doc/coding-style.txt for how to adopt HAProxy's coding style - doc/internals for developer-specific documentation (not all up to date)