Fix memory leak when clients send v5 CONNECT packets.
This occurs when they have a will message that contains invalid property types.
This commit is contained in:
parent
4f9002c58a
commit
00b24e0eb0
@ -2,6 +2,8 @@ Security:
|
|||||||
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
|
- CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2
|
||||||
messages with the same message ID, but then never respond to the PUBREC
|
messages with the same message ID, but then never respond to the PUBREC
|
||||||
commands.
|
commands.
|
||||||
|
- CVE-xxxx-xxxxx: Fix memory leak when clients send v5 CONNECT packets with a
|
||||||
|
will message that contains invalid property types.
|
||||||
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
|
- Broker will now reject Will messages that attempt to publish to $CONTROL/.
|
||||||
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
|
- Broker now validates usernames provided in a TLS certificate or TLS-PSK
|
||||||
identity are valid UTF-8.
|
identity are valid UTF-8.
|
||||||
|
@ -103,6 +103,7 @@ int property__process_will(struct mosquitto *context, struct mosquitto_message_a
|
|||||||
break;
|
break;
|
||||||
|
|
||||||
default:
|
default:
|
||||||
|
msg->properties = msg_properties;
|
||||||
return MOSQ_ERR_PROTOCOL;
|
return MOSQ_ERR_PROTOCOL;
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user