There is a documented, reliable fix in everyone's hands, namely to shut down Redis and upgrade it. This is a cute hack with a chance of crashing everything.
One thing I learned from working at Ksplice was that the amount of effort needed to build reliable live patches was huge, way more than the amount of effort needed to build a live patch good enough for your average script kiddie, who often doesn't care about crashing one percent of machines, and definitely doesn't care about it just not working on 90% of machines. There is, unfortunately, an engineering imbalance between the difficulty of the good guys' and bad guys' goals. (This is why there was no truth to the claim that Ksplice was helping the bad guys build rootkits: the technical ability to build rootkits was there all along, since Ksplice was out of tree -- the innovative engineering in Ksplice was just making hot-patches reliable.)
Comments
You're not helping by keeping a fix out of people's hands.
There is a documented, reliable fix in everyone's hands, namely to shut down Redis and upgrade it. This is a cute hack with a chance of crashing everything.
One thing I learned from working at Ksplice was that the amount of effort needed to build reliable live patches was huge, way more than the amount of effort needed to build a live patch good enough for your average script kiddie, who often doesn't care about crashing one percent of machines, and definitely doesn't care about it just not working on 90% of machines. There is, unfortunately, an engineering imbalance between the difficulty of the good guys' and bad guys' goals. (This is why there was no truth to the claim that Ksplice was helping the bad guys build rootkits: the technical ability to build rootkits was there all along, since Ksplice was out of tree -- the innovative engineering in Ksplice was just making hot-patches reliable.)
I went with this fix on my linux servers: Upgrade redis.