icinga2/lib
Julian Brost 5440fcb950 Limit nesting depth of custom variables
Recently, with fb42312e6c, we've added a limit to
how deeply nested data structures can be created from API requests to limit the
resulting recursion depth when processing them to prevent stack overflows.

However, this resulted in a slight inconsistency (not relevant for security)
where you may create custom variables with different nesting depth limits
depending on the exact way to create them. This change now introduces an
additional validation for custom variables consistently limiting there overall
depth. This was not done yet as part of the security fixes as this also affects
existing configuration in a way that might cause existing configuration now
fail the validation. The limit of 16 should be large enough so that should
affect none or very few users.
2026-07-10 10:15:40 +02:00
..
base Limit nesting depth of custom variables 2026-07-10 10:15:40 +02:00
checker Revert "CheckerComponent#CheckThreadProc(): also propagate next check update to Icinga DB" 2026-04-02 16:37:57 +02:00
cli Merge pull request #10728 from Icinga/fix-adjust-rlimits-warnings 2026-07-03 20:28:48 +02:00
compat Add warnings to deprecated features indicating removal in v2.18 2026-03-27 14:20:55 +01:00
config Silence -Wdangling-reference warning in ApplyRule 2026-06-25 16:04:55 +02:00
db_ido Replace all existing copyright headers with SPDX headers 2026-02-04 14:00:05 +01:00
db_ido_mysql Consistently use std::exception_ptr 2026-07-02 13:59:48 +02:00
db_ido_pgsql Consistently use std::exception_ptr 2026-07-02 13:59:48 +02:00
icinga Limit nesting depth of custom variables 2026-07-10 10:15:40 +02:00
icingadb Consistently use std::exception_ptr 2026-07-02 13:59:48 +02:00
livestatus Add warnings to deprecated features indicating removal in v2.18 2026-03-27 14:20:55 +01:00
methods ifw-api: omit password from curl command in check result 2026-06-01 10:51:39 +02:00
mysql_shim Replace all existing copyright headers with SPDX headers 2026-02-04 14:00:05 +01:00
notification Replace all existing copyright headers with SPDX headers 2026-02-04 14:00:05 +01:00
otel OTel: downgrade broken_pipe errors to debug log 2026-04-15 17:25:14 +02:00
perfdata Consistently use std::exception_ptr 2026-07-02 13:59:48 +02:00
pgsql_shim Replace all existing copyright headers with SPDX headers 2026-02-04 14:00:05 +01:00
remote Merge pull request #10868 from Icinga/fix/openssl4-compat 2026-07-08 12:18:57 +02:00
CMakeLists.txt Add common OTel type/lib 2026-04-01 12:18:21 +02:00