nats-io / nats-server / 3631

91%

main: 84%

push

travis-ci

[FIXED] Check of maxpayload could be bypassed if size overruns int32

One could craft a PUB protocol to cause server to panic. This can
happen if the size in the PUB protocol overruns an int32.

(note that if authorization is enabled, the user would need to
authenticate first, limiting the impact).

Thank you to Aviv Sasson and Ariel Zelivansky from Twistlock
for the security report!

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>

3 of 3 new or added lines in 2 files covered. (100.0%)

15465 of 16993 relevant lines covered (91.01%)

82266.15 hits per line