Skip to content

Denial of service via HAMT Decoding Bug #421

Open
@scacaca

Description

@scacaca

Summary

Trying to read malformed HAMT sharded directories can cause memory leaks.

Description

If you are reading untrusted user input, an attacker can then trigger a memory leaks. Because there is no size limit for the child nodes of the HAMT bucket here.
there is a similar vulnerablity
The fix can be something like this.
In js-hamt-sharding,. there is similarly no corresponding logic for size limits on child nodes

Metadata

Metadata

Assignees

No one assigned

    Labels

    need/triageNeeds initial labeling and prioritization

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions