Ivan Kozlovic 156511bba7 [FIXED] Check of maxpayload could be bypassed if size overruns int32 ...

One could craft a PUB protocol to cause server to panic. This can
happen if the size in the PUB protocol overruns an int32.

(note that if authorization is enabled, the user would need to
authenticate first, limiting the impact).

Thank you to Aviv Sasson and Ariel Zelivansky from Twistlock
for the security report!

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>

2019-07-01 15:06:08 -06:00

..

configs

Allow operator to be inline JWT. Also preloads just warn on validation issues, do not stop starting or reloads.

2019-06-24 16:46:22 -07:00

auth_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

bench_results.txt

Updated benchmarks

2018-01-15 15:27:18 -08:00

bench_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

client_auth_test.go

Update for client rename

2019-05-10 15:11:30 -07:00

client_cluster_test.go

Update for client rename

2019-05-10 15:11:30 -07:00

cluster_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

cluster_tls_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

fanout_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

gateway_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

gosrv_test.go

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00

leafnode_test.go

Use default port for leafnode remote if not specified

2019-06-29 17:50:21 -07:00

maxpayload_test.go

[FIXED] Check of maxpayload could be bypassed if size overruns int32

2019-07-01 15:06:08 -06:00

monitor_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

new_routes_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

norace_test.go

Messages not distributed evenly when sourced from leafnode.

2019-06-11 20:37:49 -07:00

operator_test.go

Allow operator to be inline JWT. Also preloads just warn on validation issues, do not stop starting or reloads.

2019-06-24 16:46:22 -07:00

opts_test.go

Update license to Apache 2

2018-03-15 22:31:07 -07:00

pedantic_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

pid_test.go

Changes for rename from gnatsd -> nats-server

2019-05-06 15:04:24 -07:00

ping_test.go

Send ping when RTT update needed

2019-07-01 11:58:06 -07:00

port_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

ports_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

proto_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

route_discovery_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

routes_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

test_test.go

Add Warnf to logger interface

2018-09-10 14:50:48 -07:00

test.go

Stager first ping from server and suppress pings if a ping was received.

2019-06-29 15:43:15 -07:00

tls_test.go

Update go.mod to satisfy v2 requirements

2019-06-03 19:45:47 -06:00

user_authorization_test.go

Added more tests, e.g. reload

2018-11-06 19:58:42 -08:00

verbose_test.go

Allow localhost to not be defined, only need 127.0.0.1

2018-06-28 16:10:19 -07:00