Bound decoder work to prevent a pointer fan-out DoS (STF-1571) - #442

Open

oschwald wants to merge 13 commits into

mainfrom

Commits on Sep 4, 2026

Update decoder resource-limit test fixtures
oschwald
committed
7aaf981
Bound decoder work per decode operation
oschwald
committed
b7e404d
Avoid revalidating cached pointer targets
oschwald
committed
7ed944c
Bound decoder collection preallocation
oschwald
committed
0ceefd4
Avoid resizing small decoded maps
oschwald
committed
d2f87d2
Bound decoded payload per decode operation
oschwald
committed
56d138a
Reject oversized integer encodings
oschwald
committed
bc86818
Skip unknown pointer values by pointer width
oschwald
committed
4c562bc
Restore container depth after decode failures
oschwald
committed
8452b6a
Charge cached pointer targets by logical cost
oschwald
committed
a9db1d3
Document decoder resource limits
oschwald
committed
70bf345
Reduce decoder allocation overhead
oschwald
committed
122f954
Fix UTF-8 decoding across buffer chunks
oschwald
committed
9ba65a3