mirror of
https://github.com/rsyslog/rsyslog.git
synced 2026-06-16 04:12:41 +02:00
Harden several parser and function-module edge cases found during the pm/fm audit pass. Why: Malformed inputs and concurrent function evaluations should not rely on unbounded delimiter scans, stale length accounting, unaligned loads, or shared mutable reply buffers. Impact: This is defensive hardening for malformed-message robustness. Existing parser behavior is preserved where tests cover it, including pmrfc3164 default-tag spacing. Technical overview: - bound pmdb2diag delimiter searches and reject invalid offsets/timeformat - require pmsnare tag rewrites to include the following tab representation - keep pmciscoios length accounting synchronized with parser skips - avoid unaligned pmpanngfw message-buffer loads - keep fmhttp reply state per call and check reply-size overflow - guard pmrfc3164 force.tagEndingByColon rewind With the help of AI-Agents: Codex, Raman, Poincare