[
https://issues.apache.org/jira/browse/MINIFICPP-2890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Marton Szasz updated MINIFICPP-2890:
------------------------------------
Description: It's used in network streams too, so theoretically a network
peer could cause large allocations. In practice all of the relevant peers are
trusted, but as a defense in depth measure, we should limit the max length of
each string field.
> InputStream::read (length prefixed string) length should be limited
> -------------------------------------------------------------------
>
> Key: MINIFICPP-2890
> URL: https://issues.apache.org/jira/browse/MINIFICPP-2890
> Project: Apache NiFi MiNiFi C++
> Issue Type: Improvement
> Reporter: Marton Szasz
> Priority: Major
>
> It's used in network streams too, so theoretically a network peer could cause
> large allocations. In practice all of the relevant peers are trusted, but as
> a defense in depth measure, we should limit the max length of each string
> field.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
