Skip to content

Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded) #265

@cowtowncoder

Description

@cowtowncoder

(note: no reproduction yet via oss-fuzz, but expecting one)

Similar to #260, lazy allocation is also needed for 7-bit escaped case, to avoid potential for small payload being used to add big memory allocation on server side (possibly leading to OOME, but even if not, unreasonably high memory usage), possibly as part of DoS attack.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions