Repository navigation

Bound decoder work to prevent a pointer fan-out DoS (STF-1572) - #355

Merged

horgh merged 28 commits into

mainfrom

greg/stf-1488

Sep 10, 2026

Commits on Sep 8, 2026
- Bound decoder work to prevent a pointer fan-out denial of service
  oschwald
  committed
  e4ba0e3
- Bound decoder payload to prevent an amplification denial of service
  oschwald
  committed
  061a3cb
- Report out-of-bounds data-section reads as a database error
  oschwald
  committed
  790cfa0
- Bound netstandard2.0 buffer reads to the database length
  oschwald
  committed
  38d5e23
- Charge followed pointers once and test resource-limit boundaries
  oschwald
  committed
  975dab6
- Test payload limits through memory loading and enumeration
  oschwald
  committed
  6746edd
- Test that decode limits reject oversized headers before reading
  oschwald
  committed
  fa6b4c2
- Test pointer-chain depth and integer payload charging
  oschwald
  committed
  ac0cc6d
- Clarify pointer-target payload accounting
  oschwald
  committed
  8ed36d6
- Correct the depth boundary and test inherited pointer depth
  oschwald
  committed
  1beee94
- Test container-depth and integer-payload boundaries
  oschwald
  committed
  403ecb3
- Test that repeated and concurrent lookups get separate budgets
  oschwald
  committed
  0ac19c9
- Test 512-container decoding with different stack sizes
  oschwald
  committed
  03f176d
- Test repeated follows of a shared pointer chain
  oschwald
  committed
  1d76141
- Document why CheckContainer's subtraction cannot overflow
  oschwald
  committed
  ad847f9
- Build the decoder's type-mismatch message out of line
  oschwald
  committed
  ff76604
- Forward command-line options to benchmarks
  oschwald
  committed
  b479813
- Separate scalar decode dispatch
  oschwald
  committed
  036bbaf
- Follow map-key pointers without recursive calls
  oschwald
  committed
  48be56d
- Avoid boxed capacities in reflection collection factories
  oschwald
  committed
  0c39ae5
- Reject oversized uint32, uint64, and uint128 encodings
  oschwald
  committed
  9f6bec8
- Decode pointer control bits before expanding value sizes
  oschwald
  committed
  bb8ee93
Commits on Sep 10, 2026
- Format release notes
  oschwald
  committed
  a4691cc
- Reject pointers to pointers during decoding
  oschwald
  committed
  7e897d2
- Test buffer bounds through each read path and Reader
  oschwald
  committed
  53fbfa3
- Test lookup recovery and map value boundaries
  oschwald
  committed
  55d1b76
- Verify dictionary factories preserve requested capacity
  oschwald
  committed
  78d70ee
- Clarify decoder limits and testing guidance
  oschwald
  committed
  d069622

Navigation Menu

Repository navigation

Bound decoder work to prevent a pointer fan-out DoS (STF-1572) - #355

Bound decoder work to prevent a pointer fan-out DoS (STF-1572)#355
horgh merged 28 commits into
mainfrom
greg/stf-1488

Commits on Sep 8, 2026

Bound decoder work to prevent a pointer fan-out denial of service

Bound decoder payload to prevent an amplification denial of service

Report out-of-bounds data-section reads as a database error

Bound netstandard2.0 buffer reads to the database length

Charge followed pointers once and test resource-limit boundaries

Test payload limits through memory loading and enumeration

Test that decode limits reject oversized headers before reading

Test pointer-chain depth and integer payload charging

Clarify pointer-target payload accounting

Correct the depth boundary and test inherited pointer depth

Test container-depth and integer-payload boundaries

Test that repeated and concurrent lookups get separate budgets

Test 512-container decoding with different stack sizes

Test repeated follows of a shared pointer chain

Document why CheckContainer's subtraction cannot overflow

Build the decoder's type-mismatch message out of line

Forward command-line options to benchmarks

Separate scalar decode dispatch

Follow map-key pointers without recursive calls

Avoid boxed capacities in reflection collection factories

Reject oversized uint32, uint64, and uint128 encodings

Decode pointer control bits before expanding value sizes

Commits on Sep 10, 2026

Format release notes

Reject pointers to pointers during decoding

Test buffer bounds through each read path and Reader

Test lookup recovery and map value boundaries

Verify dictionary factories preserve requested capacity

Clarify decoder limits and testing guidance