FasterXML / jackson-dataformats-binary

Uber-project for standard Jackson binary format backends: avro, cbor, ion, protobuf, smile
Apache License 2.0
310 stars 133 forks source link

(smile) Handle sequence of Smile header markers without recursion #268

Closed cowtowncoder closed 3 years ago

cowtowncoder commented 3 years ago

(found by ossfuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32665)

A sequence of 4-byte Smile header markers is technically legal (even if generally useless), and the current handling that uses recursion can be problematic if caller feeds parser a very long sequence (in thousands of markers). Code should be changed to avoid recursive calls.