Harden rDSN against malformed input, memory-safety bugs, and data races - #268

Merged

HX Lin (linmajia) merged 50 commits into

microsoft:masterfrom

Jul 12, 2026

Commits on Jul 10, 2026

Fix two fuzzing-found robustness bugs in path/string utils
HX Lin
committed
f40dbf3
Free conf entries in configuration destructor (fix memory leak)
HX Lin
committed
4f2671a
Harden thrift receive-path parser against amplification DoS and empty-body crash
HX Lin
committed
2022e87
Merge remote-tracking branch 'origin/master' into fix
HX Lin
committed
5e2af42
Harden RPC receive and reply paths against remotely-triggerable crashes
HX Lin
committed
91552d6
Bound thrift body deserialization against memory-amplification DoS
HX Lin
committed
f788966
Reject non-numeric rpc_address hosts on the wire to prevent a blocking-DNS DoS
HX Lin
committed
623ba23
Skip the JS runtime idl test when Node.js is older than the required version
HX Lin
committed
c5ce232
Reject parent-directory references in NFS file requests to prevent path traversal
HX Lin
committed
2b90ec6
Reject parent-directory references in NFS get_file_size responses to prevent client-side path traversal
HX Lin
committed
b92402f
Validate that NFS copy responses match the requested block to prevent server-controlled write offsets
HX Lin
committed
b8e3dd3
core: bounds-check the local_hash RPC fast-path to prevent dispatch OOB
HX Lin
committed
9fce00c
core: don't crash the process on a malformed remote cli request
HX Lin
committed
c818e76
core: don't crash the client on unexpected forward fields in an rpc reply
HX Lin
committed
26c674a
core: don't crash a hosted app when an inline rpc has no handler
HX Lin
committed
9b3fa15

Commits on Jul 11, 2026

Bump rDSN.dist.service to fix branch: replica config-change / group-check / learn assert-crash hardening
HX Lin
committed
75bbab4
Bump rDSN.dist.service: centralize config-status transition validation
HX Lin
committed
e7edf26
Bump rDSN.dist.service: harden prepare_list hard-commit assert-crash
HX Lin
committed
f1a20dd
Bump rDSN.dist.service for empty-write hardening
HX Lin
committed
01dedee
Bump rDSN.dist.service: harden mutation-log against duplicate-index assert-crash
HX Lin
committed
a6126ad
Bound nfs client copy-request allocation against untrusted file sizes
HX Lin
committed
bf90b8e
Bump rDSN.dist.service: validate mutation-log block lengths
HX Lin
committed
66657d3
Bump rDSN.dist.service: validate mutation-log file header on open
HX Lin
committed
d975b9d
Bump rDSN.dist.service: validate replica app type against path traversal
HX Lin
committed
74ed362
nfs: don't ship uninitialized block tail in copy replies
HX Lin
committed
bdf7b38
deps: advance rDSN.dist.service for mutation validation
HX Lin
committed
d9f8900
deps: advance rDSN.dist.service for mutation apply hardening
HX Lin
committed
ee4a561
Bump rDSN.dist.service: reject learn-response file names escaping learn_dir
HX Lin
committed
e9fcae7
Bump rDSN.dist.service: harden meta/ddl/replica against malformed peer input
HX Lin
committed
77983f2
Bump rDSN.dist.service: harden replica_app_info::load against alloc/read failure
HX Lin
committed
5a1f045
Bump rDSN.dist.service: fail metadata store on write error
HX Lin
committed
fa1880e
Bump rDSN.dist.service: log tail block reports ERR_INCOMPLETE_DATA not ERR_INVALID_DATA
HX Lin
committed
d97435b
Bump rDSN.dist.service: reject corrupt remote-storage partition records in meta recovery
HX Lin
committed
5d64b57
Bump rDSN.dist.service: harden failure_detector on_ping against allocation failure
HX Lin
committed
8c993cc
Bump rDSN.dist.service: harden replica init against recoverable private-log directory operation failure
HX Lin
committed
51f5f36

Commits on Jul 12, 2026

Harden HTTP message parser against oversized request body
HX Lin
committed
9d538e9
Harden remote CLI dispatch against handler exceptions
HX Lin
committed
82c9b10
Fix misaligned thrift header read in read_thrift_header
HX Lin
committed
53fe384
Avoid misaligned uint32 reads when stamping header magics
HX Lin
committed
cd5500b
Bump rDSN.dist.service: ZooKeeper empty-node guards + mutation_log alignment
HX Lin
committed
082eae2
Disable spurious pack(4) in partition_resolver_simple to fix misaligned-access UB
HX Lin
committed
d935579
Fix TSan write-write data race on error_code::_used diagnostic flag
HX Lin
committed
e47efbf
Fix data race on trackable_task::_owner via missing release/acquire
HX Lin
committed
d3fa29b
Update rDSN.dist.service: ZooKeeper session-startup data race fixes
HX Lin
committed
85ea1a1
Sync rDSN.dist.service with latest master
HX Lin
committed
f680ca7
Track rDSN.dist.service master after merged PR
HX Lin
committed
4679773
Suppress expected configuration stress-test diagnostics
HX Lin
committed
30fa7cd
Add reusable scoped stderr capture for unit tests
HX Lin
committed
ed4f712
Suppress expected output from additional core tests
HX Lin
committed
18bee29
Suppress expected output from passing tests
HX Lin
committed
c4873ed