Merge pull request #2739 from vulgraph/backport/CVE-2024-10964-v2.6

v2.6: bound plugin-library copy (CVE-2024-10964)
This commit is contained in:
fengzeroz
2026-09-24 09:39:39 +08:00
committed by GitHub
+1 -1
View File
@@ -40,7 +40,7 @@ void handle_add_plugin(nng_aio *aio)
header.ctx = aio;
header.type = NEU_REQ_ADD_PLUGIN;
strcpy(cmd.library, req->library);
strncpy(cmd.library, req->library, NEU_PLUGIN_LIBRARY_LEN);
ret = neu_plugin_op(plugin, header, &cmd);
if (ret != 0) {
NEU_JSON_RESPONSE_ERROR(NEU_ERR_IS_BUSY, {