tree 4466750bc38cddbdd9d32a4523f5df498a3336b5
parent ad532c392816dff3129e03e90e2e07cefe94618c
author Dominic Evans <dominic.evans@uk.ibm.com> 1458300023 +0000
committer Justin Ross <jross@redhat.com> 1467387182 -0700

PROTON-1249: Safeguard type initialisations.

In #readValue() for ArrayType, BinaryType, ListType and MapType
decoding, if the 'count' specified is very large then it is likely to
trigger an OutOfMemoryException. As these can come from an external data
source, during the SASL init for example, there is a potential for a
denial of service. The fix is to throw an IllegalArgumentException if
the count value is larger than the amount of data available in the
received bytes.