[
https://issues.apache.org/jira/browse/MINIFICPP-2890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Marton Szasz reassigned MINIFICPP-2890:
---------------------------------------
Assignee: Marton Szasz
> InputStream::read (length prefixed string) length should be limited
> -------------------------------------------------------------------
>
> Key: MINIFICPP-2890
> URL: https://issues.apache.org/jira/browse/MINIFICPP-2890
> Project: Apache NiFi MiNiFi C++
> Issue Type: Improvement
> Reporter: Marton Szasz
> Assignee: Marton Szasz
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> It's used in network streams too, so theoretically a network peer could cause
> large allocations. In practice all of the relevant peers are trusted, but as
> a defense in depth measure, we should limit the max length of each string
> field.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
