Bound decoder resource use to prevent denial of service (STF-1488) - #439

Merged

horgh merged 18 commits into

mainfrom

Sep 9, 2026

Commits on Sep 8, 2026

Bound decoder work to prevent a pointer fan-out denial of service

oschwald
and
claude
committed
ec48a5d
Bound decoder string and bytes payload to stop amplification

oschwald
and
claude
committed
d35f28e
Update libmaxminddb to 1.14.0 and test its resource limits

oschwald
and
claude
committed
faeba4e
Report truncated data as InvalidDatabaseError

oschwald
and
claude
committed
24e2682
Skip the size call for ctrl bytes that hold the size

oschwald
and
claude
committed
1aea5d0
Decode pointers with integer arithmetic

oschwald
and
claude
committed
d52f54a
Tighten the map and array decode loops

oschwald
and
claude
committed
5621b6c
Dispatch decoder types with match
oschwald
committed
1e7806d
Decode strings inline in the first match case

oschwald
and
claude
committed
bcd5228
Read search tree nodes with integer arithmetic

oschwald
and
claude
committed
ca1987a

Commits on Sep 9, 2026

Reject pointers that target other pointers
oschwald
committed
2d1bea5
Close reader buffers when initialization fails
oschwald
committed
da62052
Validate search tree metadata when opening the database
oschwald
committed
86d82c6
Cover decoder recursion and pointer boundary cases
oschwald
committed
2dc7511
Test high nibbles in 28-bit search tree records
oschwald
committed
20853e9
Clarify decoder limits and early tree validation
oschwald
committed
53622e7
Bound malformed metadata cleanup tests
oschwald
committed
2983246
Use a dataclass for decoder budgets
oschwald
committed
976b641