NagamineLee

when using "resty.limit.req" to control rate, actual request processing rate might exceed configured rate.

5

http { limit_req_zone $uri zone=one:10m rate=1000r/s; server { location /limit-req { access_by_lua_block { local limit_req = require "resty.limit.req" local lim, err = limit_req.new("my_limit_req_store", 100, 0) ... if delay >= 0.001...

some test cases can't pass in ARM, but in X86_64 is OK.

4

OS: centos 7.6 ARCH: aarch64(ARM) LuaJIT compile command: ``` make TARGET_STRIP=@: CCDEBUG=-g CC=cc XCFLAGS="-DLUA_USE_APICHECK -DLUA_USE_ASSERT -DLUAJIT_NUMMODE=2 -g -O1 -std=gnu99" ``` only two cases occurs exception: ``` === test/ffi/ffi_jit_struct.lua /DATA/yfli1/test/upngx-test/luajit-test-suite/luajit/bin/luajit-2.1.0-beta3: bad...

[CVE]A heap overflow in the lua-cjson library

1

CVE has revealed a a critical vulnerability about Redis，but details of the vulnerability are more related to cjson. By reviewing the Redis source code, the cjson library used in Redis...