You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The max_payload configuration option is ignored when parsing.
This opens up two DoS vectors that cause crashes in gnatsd.
PUB o 680444720440
produces the following panic() output:
panic: runtime error: makeslice: cap out of range
goroutine 9 [running]:
github.com/nats-io/gnatsd/server.(*client).parse(0xc820132000, 0xc82013c000, 0x13, 0x8000, 0x0, 0x0)
/home/dgryski/work/src/cvs/gocode/src/github.com/nats-io/gnatsd/server/parser.go:630 +0x291
github.com/nats-io/gnatsd/server.(*client).readLoop(0xc820132000)
/home/dgryski/work/src/cvs/gocode/src/github.com/nats-io/gnatsd/server/client.go:155 +0x194
created by github.com/nats-io/gnatsd/server.(*client).initClient
/home/dgryski/work/src/cvs/gocode/src/github.com/nats-io/gnatsd/server/client.go:133 +0x782
and 2) PUB 0 8000000000
produces an out-of-memory error on the same line
The text was updated successfully, but these errors were encountered:
The max_payload configuration option is ignored when parsing.
This opens up two DoS vectors that cause crashes in gnatsd.
PUB o 680444720440
produces the following panic() output:
and 2)
PUB 0 8000000000
produces an out-of-memory error on the same line
The text was updated successfully, but these errors were encountered: