Skip to content

Prevent definite map length overflow - #39

Open
OskarEichler wants to merge 1 commit into
cabo:masterfrom
OskarEichler:codex/reject-oversized-maps
Open

Prevent definite map length overflow#39
OskarEichler wants to merge 1 commit into
cabo:masterfrom
OskarEichler:codex/reject-oversized-maps

Conversation

@OskarEichler

Copy link
Copy Markdown

Saturates internal map item accounting when doubling a definite map length would overflow size_t, allowing the existing incomplete-input path to reject the payload safely.

Verified with 170 upstream examples plus focused oversized-map models.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant