Skip to content

Limit the size of SNI parsed from ClientHello #133348

Closed
Bug
#133361
Closed
Limit the size of SNI parsed from ClientHello#133348
Bug
#133361
Labels
area-System.Net.Security

Description

@rzikm
rzikm
opened on Sep 7, 2026

SNI contains the domain name of the target server, as such, it is always at most 255 characters, payloads larger than that are definitely malformed and we can fail early.

Activity

  1. rzikm
    added
    area-System.Net.Security
    on Sep 7, 2026
  2. rzikm
    added the
    Bug
    issue type on Sep 7, 2026
  3. dotnet-policy-service
    added
    untriagedNew issue has not been triaged by the area owner
    on Sep 7, 2026

  4. dotnet-policy-service commented on Sep 7, 2026

    @dotnet-policy-service
    dotnet-policy-servicebot
    on Sep 7, 2026 – with Dotnet Policy Service
    Contributor

    Tagging subscribers to this area: @dotnet/ncl, @bartonjs, @vcsjones
    See info in area-owners.md if you want to be subscribed.

  5. rzikm
    closed this as completedin #133361on Sep 8, 2026
  6. rzikm
    added a commit that references this issue on Sep 8, 2026

    Limit the size of SNI parsed from ClientHello (#133361)

    01d61a5
  7. dotnet-policy-service
    removed
    untriagedNew issue has not been triaged by the area owner
    on Sep 8, 2026
  8. github-actions
    locked and limited conversation to collaborators on Oct 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area-System.Net.Security

    Type

    Bug

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions