realm / realm-dotnet

Realm is a mobile database: a replacement for SQLite & ORMs
https://realm.io
Apache License 2.0
1.25k stars 164 forks source link

Potential outgoing message corruption in managed websockets #3671

Closed sync-by-unito[bot] closed 1 month ago

sync-by-unito[bot] commented 1 month ago

When managed websockets are enabled we use array pooling to cut down on constant managed heap allocations for the byte arrays that store the sync messages Core wants us to send. However there is a chance that if a rented array is bigger than the buffer we need to store we will attempt to send the entire array, including stale data it contained previously.

sync-by-unito[bot] commented 1 month ago

➤ PM Bot commented:

Jira ticket: RNET-1175