fishy opened a new pull request #2292: URL: https://github.com/apache/thrift/pull/2292
Client: go Currently we have a guard for go's TBinaryProtocol.ReadString, abstract it to also apply it to TBinaryProtocol.ReadBinary, TCompactProtocol.ReadString, and TCompactProtocol.ReadBinary as well. Also the current implementation for TBinaryProtocol.ReadString will only read up to twice of the read limit, remove that restriction. So if we have a malformed message with insanely large string length but moderately large size of bytes left in the message, we will only allocate up to the max of number of: bytes left + single read limit. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
