Bound decoder work to prevent a pointer fan-out DoS (STF-1571) - #442

Merged

horgh merged 25 commits into

mainfrom

greg/stf-1488

Sep 9, 2026

Commits on Sep 8, 2026

Update decoder resource-limit test fixtures
oschwald
committed
80e3bea
Bound decoder work per decode operation
oschwald
committed
56300ff
Avoid revalidating cached pointer targets
oschwald
committed
7623b3c
Bound decoder collection preallocation
oschwald
committed
3eadcb5
Avoid resizing small decoded maps
oschwald
committed
3884fa5
Bound decoded payload per decode operation
oschwald
committed
2eda46c
Reject oversized integer encodings
oschwald
committed
ee6d341
Skip unknown pointer values by pointer width
oschwald
committed
d78374f
Restore container depth after decode failures
oschwald
committed
d448fb1
Charge cached pointer targets by logical cost
oschwald
committed
0f74740
Document decoder resource limits
oschwald
committed
e23b67b
Reduce decoder allocation overhead
oschwald
committed
620924d
Fix UTF-8 decoding across buffer chunks
oschwald
committed
74ccdb5
Speed up UTF-8 string decoding
oschwald
committed
92f710d
Reject truncated value headers with InvalidDatabaseException

oschwald
and
claude
committed
d1e6dc4
Skip unknown integer payloads without validating their widths
oschwald
committed
140b5a7
Test packed costs against the decoder resource limits
oschwald
committed
d87f0a5
Run pointer fan-out tests in a bounded subprocess
oschwald
committed
791a050
Cover payload and skipped-depth boundaries across cache states
oschwald
committed
f314068
Test payload boundaries with concurrent shared-cache lookups
oschwald
committed
553be73
Remove redundant decoder cost accessors and size casts
oschwald
committed
a0ed65e
Describe file bounds accurately in decoder errors
oschwald
committed
0731430
Identify payload boundary assertions by cache and attempt
oschwald
committed
715e999
Clarify decoder accounting and cache contracts
oschwald
committed
e0fa785
Consolidate release notes and document skipped-field behavior
oschwald
committed
a326219

Navigation Menu

Uh oh!

Bound decoder work to prevent a pointer fan-out DoS (STF-1571) - #442

Bound decoder work to prevent a pointer fan-out DoS (STF-1571)#442
horgh merged 25 commits into
mainfrom
greg/stf-1488

Commits on Sep 8, 2026

Update decoder resource-limit test fixtures

Bound decoder work per decode operation

Avoid revalidating cached pointer targets

Bound decoder collection preallocation

Avoid resizing small decoded maps

Bound decoded payload per decode operation

Reject oversized integer encodings

Skip unknown pointer values by pointer width

Restore container depth after decode failures

Charge cached pointer targets by logical cost

Document decoder resource limits

Reduce decoder allocation overhead

Fix UTF-8 decoding across buffer chunks

Speed up UTF-8 string decoding

Reject truncated value headers with InvalidDatabaseException

Skip unknown integer payloads without validating their widths

Test packed costs against the decoder resource limits

Run pointer fan-out tests in a bounded subprocess

Cover payload and skipped-depth boundaries across cache states

Test payload boundaries with concurrent shared-cache lookups

Remove redundant decoder cost accessors and size casts

Describe file bounds accurately in decoder errors

Identify payload boundary assertions by cache and attempt

Clarify decoder accounting and cache contracts

Consolidate release notes and document skipped-field behavior