fabruic icon indicating copy to clipboard operation
fabruic copied to clipboard

Prevent memory exhaustion attacks via bincode

Open ecton opened this issue 4 years ago • 1 comments

We shouldn't ever use bincode::deserialize directly. The preferred method is to use the Options trait. The DefaultOptions struct talks about what options are set up by default, and the important part for us is the byte limit.

ecton avatar May 21 '21 14:05 ecton

When I start cleaning up Fabruic I will move all TODOs from the code into issues, this is one of them.

daxpedda avatar May 25 '21 07:05 daxpedda