gogrlx/nats-server
1
0
Fork 0
mirror of https://github.com/gogrlx/nats-server.git synced 2026-04-02 03:38:42 -07:00
Code Issues Packages Projects Releases Wiki Activity

Avoid parsing large sizes for messages

Browse Source 
Signed-off-by: Derek Collison <derek@nats.io>
This commit is contained in:
Derek Collison
2020-06-01 15:59:41 -07:00
parent f8d6dd992b
commit 07ef71ff98
3 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
server/parser_test.go
View File

@@ -225,6 +225,16 @@ func TestParsePub(t *testing.T) {
}
}
// https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/
func TestParsePubSizeOverflow(t *testing.T) {
c := dummyClient()
pub := []byte("PUB foo 3333333333333333333333333333333333333333333333333333333333333333\r\n")
if err := c.parse(pub); err == nil {
t.Fatalf("Expected an error")
}
}
func TestParsePubArg(t *testing.T) {
c := dummyClient()