[PR] Guard txn_box stack allocations [trafficserver]

["bneradt (via GitHub)" <gi...@apache.org>]

bneradt opened a new pull request, #13128:
URL: https://github.com/apache/trafficserver/pull/13128

   Large tuple features and Host field rewrites can flow through txn_box from
   request-controlled input. Several paths used alloca with sizes derived from
   those values, which could consume a large fraction of the ATS thread stack or
   overflow it outright.
   
   This bounds the temporary filter tuple array by a byte budget and aligns Host
   field rewrite buffers with the core host-name limit. Oversized filter input now
   returns an error, while oversized Host rewrites leave the existing Host field
   unchanged instead of allocating a large stack buffer.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Guard txn_box stack allocations [trafficserver]

["bneradt (via GitHub)" <gi...@apache.org>]

bneradt closed pull request #13128: Guard txn_box stack allocations
URL: https://github.com/apache/trafficserver/pull/13128


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org