[jira] [Updated] (CASSANDRA-3017) add a Message size limit

["Jeremy Hanna (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CASSANDRA-3017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jeremy Hanna updated CASSANDRA-3017:
------------------------------------
    Complexity: Low Hanging Fruit

> add a Message size limit
> ------------------------
>
>                 Key: CASSANDRA-3017
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-3017
>             Project: Cassandra
>          Issue Type: Improvement
>          Components: Legacy/Streaming and Messaging
>            Reporter: Jonathan Ellis
>            Priority: Low
>              Labels: lhf
>             Fix For: 4.x
>
>         Attachments: 0001-use-the-thrift-max-message-size-for-inter-node-messa.patch, trunk-3017.txt
>
>
> We protect the server from allocating huge buffers for malformed message with the Thrift frame size (CASSANDRA-475).  But we don't have similar protection for the inter-node Message objects.
> Adding this would be good to deal with malicious adversaries as well as a malfunctioning cluster participant.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org