OpenSearch/libs
kartg af6fbc77eb
Improving the Grok circular reference check to prevent stack overflow (#1079)
This change refactors the circular reference check in the Grok processor class
to use a formal depth-first traversal. It also includes a logic update to
prevent a stack overflow in one scenario and a check for malformed patterns.
This bugfix addresses CVE-2021-22144.

Signed-off-by: Kartik Ganesh <85275476+kartg@users.noreply.github.com>
2021-08-12 12:52:02 -04:00
..
cli [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
core [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
dissect [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
geo [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
grok Improving the Grok circular reference check to prevent stack overflow (#1079) 2021-08-12 12:52:02 -04:00
nio Fix resource leak issues suggested by Amazon CodeGuru (#816) 2021-06-15 09:31:36 -07:00
plugin-classloader [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
secure-sm [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00
ssl-config alt bash path support (#1047) 2021-08-06 11:09:29 -04:00
x-content [CVE] Upgrade dependencies to mitigate CVEs (#657) 2021-05-18 11:37:24 -07:00
build.gradle [License] Add SPDX and OpenSearch Modification license header (#509) 2021-04-09 14:28:18 -05:00