#542: Add a warning note for the usage of MessageUnpacker.readPayloadAsReference by xerial · Pull Request #546 · msgpack/msgpack-java
Navigation Menu
{{ message }}
msgpack / msgpack-java Public
- Notifications You must be signed in to change notification settings
- Fork 325
Merged
Conversation
…PayloadAsReference
xerial
mentioned this pull request
xerial
requested a review
from komamitsu
komamitsu approved these changes Feb 15, 2021
Copy link Copy Markdown
Member
komamitsu
left a comment
komamitsu
left a comment
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The user of this method can know the buffer length encoded in the header. Even with a wrong length in header encoded by an attacker, it should be safe as long as the user of this method implements safely.
xerial
merged commit
4976b7f
into
msgpack:develop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants