search

sociomantic-tsunami / dhtproto

Distributed Hash Table protocol definition, client, fake node, and tests
Boost Software License 1.0
5 stars 22 forks source link

Limit the maximum length of the input array #164

Closed nemanja-boric-sociomantic closed 6 years ago

nemanja-boric-sociomantic commented 6 years ago

Previously, no check for the array length was performed. This allowed for badly behaving remote parties to perform DOS attack asking for unreasonably large arrays to be allocated.

This limits the maximum array size to 10MB.

nemanja-boric-sociomantic commented 6 years ago

Closing in favor of https://github.com/sociomantic-tsunami/swarm/pull/343