rgw: asio: check the remote endpoint before processing requests
authorAbhishek Lekshmanan <abhishek@suse.com>
Wed, 7 Aug 2019 15:09:32 +0000 (17:09 +0200)
committerBastien Roucariès <rouca@debian.org>
Sat, 21 Oct 2023 16:42:26 +0000 (17:42 +0100)
commit3ec3c59038030228752be55279da1e6046bd2935
tree8ad1ff35de7bcbbdcf1adf173c2de54b3f7f0e60
parent8e32164ab2ee1c55c3658d685fd7d7018bcc5988
rgw: asio: check the remote endpoint before processing requests

`socket.remote_endpoint()` can throw exceptions corresponding to errors in the
`getpeername` syscall, make sure these are handled.

Fixes: CVE-2019-10222, https://tracker.ceph.com/issues/40018
Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
Origin: upstream, https://github.com/ceph/ceph/commit/6171399fdedd928b4249d135b4036e3de25079aa

Gbp-Pq: Name CVE-2019-10222.patch
src/rgw/rgw_asio_frontend.cc