Jens Geyer created THRIFT-6043:
----------------------------------

             Summary: Harden Python binary protocol negative sizes
                 Key: THRIFT-6043
                 URL: https://issues.apache.org/jira/browse/THRIFT-6043
             Project: Thrift
          Issue Type: Bug
          Components: Python - Library
            Reporter: Jens Geyer


The Python library does not limit struct read/write recursion depth. A deeply 
nested message can exhaust the call stack. Add increment/decrement recursion 
depth tracking to TProtocolBase and emit the calls from the generated struct 
read() and write() methods.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to