qpid-proton mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Stitcher (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (PROTON-771) AMQP and SASL performatives are not validated against correct frame type
Date Fri, 12 Dec 2014 20:48:13 GMT

     [ https://issues.apache.org/jira/browse/PROTON-771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andrew Stitcher resolved PROTON-771.
------------------------------------
       Resolution: Fixed
    Fix Version/s: 0.9

> AMQP and SASL performatives are not validated against correct frame type
> ------------------------------------------------------------------------
>
>                 Key: PROTON-771
>                 URL: https://issues.apache.org/jira/browse/PROTON-771
>             Project: Qpid Proton
>          Issue Type: Bug
>          Components: proton-c
>            Reporter: Andrew Stitcher
>            Assignee: Andrew Stitcher
>             Fix For: 0.9
>
>
> The protocol processing logic for proton does not currently validate that amqp and sasl
performatives actually have the correct frame type. In fact the current code completely ignores
the frame type.
> This really only means that it will accept some invalid protocol sequences and treat
them as valid ones, it doesn't allow any security exploits in itself.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message