Repository navigation
vsock partial-frame DoS: 16 unauthenticated connections exhaust the pool #150
Description
Red-team finding F6.4 (validated, deferred). framing.rs pre-allocates the full claimed body (vec![0u8; len], up to 4 MiB) before reading it, and a permit is consumed before token auth. 16 unauth connections each sending a 4 MiB header and withholding the body hold the whole MAX_CONNECTIONS pool (~64 MiB) and can sustain the outage across the 10s auth deadline. Proposed fix: stream the body / cap the pre-auth allocation, and/or a separate smaller quota for unauthenticated connections. Not yet fixed.
Activity
fix(security): close six red-team findings from a defensive audit (#154)
test(security): prove the #150 streaming fix actually bounds reads
chore(release): 0.6.0 (#166)
fix(security): close six red-team findings from a defensive audit (#154)
fix(security): stream frame bodies to stop a partial-frame memory DoS (…
chore(release): 0.6.0 (#166)