Bound decoder resource use to prevent denial of service (STF-1488) - #439

Open

oschwald wants to merge 9 commits into

mainfrom

Commits on Sep 5, 2026

Bound decoder work to prevent a pointer fan-out denial of service

oschwald
and
claude
committed
18c93d6
Bound decoder string and bytes payload to stop amplification

oschwald
and
claude
committed
db0b269
Update libmaxminddb and test the extension rejects the DoS fixtures

oschwald
and
claude
committed
c33a279
Report truncated data as InvalidDatabaseError

oschwald
and
claude
committed
7ae95a6
Skip the size call for ctrl bytes that hold the size

oschwald
and
claude
committed
5f75c03
Decode pointers with integer arithmetic

oschwald
and
claude
committed
03cb7aa
Tighten the map and array decode loops

oschwald
and
claude
committed
7c2f6a8
Decode strings inline in _decode

oschwald
and
claude
committed
9cc9df6
Read search tree nodes with integer arithmetic

oschwald
and
claude
committed
fa19cca