1. 10 Jul, 2019 1 commit
    • Nate Rini's avatar
      Escape strings extracted from an archive file in accounting_storage/mysql. · afa7d743
      Nate Rini authored
      Use safe_unpackstr_xmalloc() instead of unpackstr_ptr to ensure all
      strings are escaped correctly in SlurmDBD.
      
      This requires the introduction of the _free_local_*() functions to free
      the structure members, whereas they were previously just pointers into
      the single managed buffer which was cleaned up elsewhere.
      
      Remove the unsafe unpackstr_ptr macro definition as well while here.
      
      CVE-2019-12838.
      afa7d743
  2. 28 Jun, 2019 1 commit
    • Dominik Bartkiewicz's avatar
      Cast reservation flags before sending to MySQL. · c11eed5c
      Dominik Bartkiewicz authored
      Flags are stored in a smallint, which can only hold the first 16 bits
      worth out of 32 bits of flags currently in use.
      
      MySQL's overflow rules will treat any value > 0xffff as 0xffff, rather than
      dropping the higher-order bits (flags), which means the stored value not
      only loses the higher-order bits but corrupts the lower-order as well.
      
      The 19.05 release extends the column to bigint (64 bit).
      
      Bug 6969.
      c11eed5c
  3. 07 Jun, 2019 4 commits
  4. 06 Jun, 2019 1 commit
  5. 05 Jun, 2019 8 commits
  6. 03 Jun, 2019 1 commit
  7. 29 May, 2019 1 commit
  8. 27 May, 2019 2 commits
  9. 25 May, 2019 3 commits
  10. 24 May, 2019 2 commits
  11. 23 May, 2019 11 commits
  12. 22 May, 2019 5 commits