20052263983
83%

Ran 09 Dec 2025 05:53AM UTC

Jobs 1

Files 61

Run time 1min

Badge

Embed ▾

Committed 08 Dec 2025 11:02PM UTC coverage: 84.691% (-0.06%) from 84.751%

Build # 20052263983

Build Type

push

github

Committed by

web-flow

Commit Message

[FIXED] Websocket: limit buffer size during decompression of a frame (#7625)

When the server would decompress a compressed websocket frame, it would
not limit the resulting size of the uncompressed buffer. Once
uncompressed the maximum payload size would still be used to reject
messages that are too big, but the server would have already
uncompressed a possibly very big buffer (if the frame contained highly
compressed data).

This PR limits the number of bytes that are being decompressed using the
maximum payload size as a limit.

Credit goes to:
Pavel Kohout, Aisle Research (www.aisle.com) for reporting the issue and
providing a path.

The propose patched as been updated a bit (need to use atomic to use the
connection's max payload value) and some tweaks around the use of the
`io.LimitedReader`.

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>

Run Details

74061 of 87449 relevant lines covered (84.69%)

360453.84 hits per line

Uncovered Existing Lines

Lines	Coverage	∆	File
1	86.26	-0.05%	src/github.com/nats-io/nats-server/server/events.go
2	83.01	0.09%	src/github.com/nats-io/nats-server/server/filestore.go
2	63.16	-10.53%	src/github.com/nats-io/nats-server/server/jetstream_events.go
2	90.0	-0.08%	src/github.com/nats-io/nats-server/server/leafnode.go
2	86.2	0.12%	src/github.com/nats-io/nats-server/server/stream.go
4	73.88	0.03%	src/github.com/nats-io/nats-server/server/jetstream_api.go
4	93.46	0.0%	src/github.com/nats-io/nats-server/server/route.go
5	79.41	0.04%	src/github.com/nats-io/nats-server/server/opts.go
6	93.76	-0.24%	src/github.com/nats-io/nats-server/server/gateway.go
10	89.91	-0.31%	src/github.com/nats-io/nats-server/server/server.go
17	88.22	-0.24%	src/github.com/nats-io/nats-server/server/consumer.go
18	87.24	-0.33%	src/github.com/nats-io/nats-server/server/raft.go
41	93.89	-0.88%	src/github.com/nats-io/nats-server/server/client.go
214	89.57	0.02%	src/github.com/nats-io/nats-server/server/mqtt.go
222	69.88	-0.16%	src/github.com/nats-io/nats-server/server/websocket.go
859	82.86	-0.04%	src/github.com/nats-io/nats-server/server/jetstream_cluster.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	20052263983.1	09 Dec 2025 05:52AM UTC	61	84.69	GitHub Action Run

nats-io / nats-server / 20052263983
83%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 20052263983

nats-io / nats-server / 20052263983 83%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Uncovered Existing Lines

Jobs

Source Files on build 20052263983

nats-io / nats-server / 20052263983
83%

README BADGES
x