Skip to content

fix(decode): prevent unbounded memory allocation on slice decoding - #408

Open
AdamMagued wants to merge 1 commit into
vmihailenco:v5from
AdamMagued:fix-issue-401
Open

AdamMagued wants to merge 1 commit into
vmihailenco:v5from
AdamMagued:fix-issue-401

Conversation

@AdamMagued

Copy link
Copy Markdown

Fixes #401

Summary

  • Guarded slice decoding allocation against oversized/malformed length headers.
  • Added unit tests verifying safe rejection of excessive allocation headers.

Verified via container sandbox test suite.

Signed-off-by: AdamMagued <adamismailmageud@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security vulnerability disclosure: unbounded memory allocation when decoding slices (msgpack v5, CVE pending)

1 participant