/ 
Redis-Fast-0.28
River stage one • 7 direct dependents • 7 total dependents
⭐ Starred 25 GitHub stars
/ Redis::Fast::List
Security Advisories (1)
CVE-2021-32765 (2021-10-04)

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.

NAME

Redis::List - tie Perl arrays to Redis lists

SYNOPSYS

tie @my_list, 'Redis::List', 'list_name', @Redis_new_parameters;

$value = $my_list[$index];
$my_list[$index] = $value;

$count = @my_list;

push @my_list, 'values';
$value = pop @my_list;
unshift @my_list, 'values';
$value = shift @my_list;

## NOTE: fourth parameter of splice is *NOT* supported for now
@other_list = splice(@my_list, 2, 3);

@my_list = ();