Dapr june 2023 fuzzing audit reportFuzzHandleRequest github.com/dapr/dapr/pkg/injector 3 FuzzFSMPlacementState github.com/dapr/dapr/pkg/placement/raft 4 FuzzDaprRuntime github.com/dapr/dapr/pkg/runtime 5 FuzzInvokeRemote github.com/dapr/dapr/pkg/messaging Fixed 3 Key with empty seed will trigger panic in Go standard library Fixed Index out of range in raft log reading OSS-Fuzz bug tracker: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58799 Mitigation: 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 func (c *FSM) Apply(log *raft.Log) interface{} { var ( err error updated bool ) if log.Index < c.state.Index() { logging.Warnf("old:0 码力 | 19 页 | 690.59 KB | 1 年前3
共 1 条
- 1













