许大仙 comments

Results 4 comments of


                                            许大仙

An Ubjson Parsing Problem Can Easily Cause DDoS Attack.

> Do I understand your issue right that the "attack" would be parsing a UBJSON array that is encoded like "an array with 100000 null values" which, due to the...

An Ubjson Parsing Problem Can Easily Cause DDoS Attack.

Thanks for your reply! Obviously, the solution is not limited to the two options I suggested above. As the creator of this repository, you have a much better understanding of...

An Ubjson Parsing Problem Can Easily Cause DDoS Attack.

Based on your suggestion, I have also tried `py-ubjson`. **The test case('[$Z#L\x00\x00\x00\x00\xff\xff\xff\xff') you provided is actually different from the one I used before('[$Z#l\x31\x7E\x7E\x7E').** You should compare the difference between the...

An Ubjson Parsing Problem Can Easily Cause DDoS Attack.

> If I understand this issue here correctly this is about preventing parsing input which is small (in terms of memory size) on the attacker side but large on the...