{"action":"created","issue":{"url":"https://api.github.com/repos/ceph/ceph/issues/21775","repository_url":"https://api.github.com/repos/ceph/ceph","labels_url":"https://api.github.com/repos/ceph/ceph/issues/21775/labels{/name}","comments_url":"https://api.github.com/repos/ceph/ceph/issues/21775/comments","events_url":"https://api.github.com/repos/ceph/ceph/issues/21775/events","html_url":"https://github.com/ceph/ceph/pull/21775","id":319490095,"number":21775,"title":"librados: fix buffer overflow for aio_exec python binding","user":{"login":"agutikov","id":3774676,"avatar_url":"https://avatars2.githubusercontent.com/u/3774676?v=4","gravatar_id":"","url":"https://api.github.com/users/agutikov","html_url":"https://github.com/agutikov","followers_url":"https://api.github.com/users/agutikov/followers","following_url":"https://api.github.com/users/agutikov/following{/other_user}","gists_url":"https://api.github.com/users/agutikov/gists{/gist_id}","starred_url":"https://api.github.com/users/agutikov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agutikov/subscriptions","organizations_url":"https://api.github.com/users/agutikov/orgs","repos_url":"https://api.github.com/users/agutikov/repos","events_url":"https://api.github.com/users/agutikov/events{/privacy}","received_events_url":"https://api.github.com/users/agutikov/received_events","type":"User","site_admin":false},"labels":[{"id":144329561,"url":"https://api.github.com/repos/ceph/ceph/labels/core","name":"core","color":"0041a2","default":false},{"id":295264318,"url":"https://api.github.com/repos/ceph/ceph/labels/pybind","name":"pybind","color":"bfd4f2","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-02T10:04:18Z","updated_at":"2018-05-03T08:44:27Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/ceph/ceph/pulls/21775","html_url":"https://github.com/ceph/ceph/pull/21775","diff_url":"https://github.com/ceph/ceph/pull/21775.diff","patch_url":"https://github.com/ceph/ceph/pull/21775.patch"},"body":"Fixes: https://tracker.ceph.com/issues/23964\r\n\r\nSigned-off-by: Aleksei Gutikov <aleksey.gutikov@synesis.ru>\r\n\r\nC_aio_Complete::finish() checks if bufferlist contains out_buf pointer,\r\nbut is_provided_buffer also checks if bufferlist is contiguous.\r\nSo if operation returns more data than length of buffer - than bufferlist will be extended\r\nand is_provided_buffer() will return false.\r\nSo copy() will be called and overwrites malloc metadata."},"comment":{"url":"https://api.github.com/repos/ceph/ceph/issues/comments/386228347","html_url":"https://github.com/ceph/ceph/pull/21775#issuecomment-386228347","issue_url":"https://api.github.com/repos/ceph/ceph/issues/21775","id":386228347,"user":{"login":"majianpeng","id":1230551,"avatar_url":"https://avatars3.githubusercontent.com/u/1230551?v=4","gravatar_id":"","url":"https://api.github.com/users/majianpeng","html_url":"https://github.com/majianpeng","followers_url":"https://api.github.com/users/majianpeng/followers","following_url":"https://api.github.com/users/majianpeng/following{/other_user}","gists_url":"https://api.github.com/users/majianpeng/gists{/gist_id}","starred_url":"https://api.github.com/users/majianpeng/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/majianpeng/subscriptions","organizations_url":"https://api.github.com/users/majianpeng/orgs","repos_url":"https://api.github.com/users/majianpeng/repos","events_url":"https://api.github.com/users/majianpeng/events{/privacy}","received_events_url":"https://api.github.com/users/majianpeng/received_events","type":"User","site_admin":false},"created_at":"2018-05-03T08:44:26Z","updated_at":"2018-05-03T08:44:26Z","author_association":"MEMBER","body":"@agutikov .  Can you reference C_bl_to_buf.  We should first check return.len > provided.len. If this case occur, we don't care data. "}}
{"actor":{"display_login":"majianpeng"}}