[QPID-3227] rdma layer may allow overrun of send buffers

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.10
• Fix Version/s: 0.11
• Component/s: C++ Broker
• Assignee: Ken Giusti
• Reporter: Ken Giusti
• Created: 26/Apr/11 19:46
• Updated: 29/Jul/13 18:53
• Resolved: 03/May/11 17:03

Description

The rdma driver adds a small trailer to outbound buffers, however the size of this header is not accounted for when the buffer's size is passed to the codec. If the codec fills all available buffer space, the rdma driver will overwrite the end of the buffer when adding the trailer.

Kudos to Chuck Rolke for helping root-cause this bug!