Uploaded image for project: 'MariaDB Connector/node.js'
  1. MariaDB Connector/node.js
  2. CONJS-359

default maxAllowedPacket value when not set

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • None
    • 3.5.4
    • security
    • None

    Description

      MitM server can drive client memory to exhaustion by streaming endless 0xffffff multi-part fragments: reassembly in PacketInputStream grows unbounded.

      CONJS-358 closed the pre-authentication window only, and did so after buffering a full 16Mb fragment.

      Changes:
      When unset, maxAllowedPacket resolves to a quarter of the memory available to the process: the cgroup limit when containerised, physical memory otherwise, bounded to [16Mb, 1Gb].

      Attachments

        Activity

          People

            diego dupin Diego Dupin
            diego dupin Diego Dupin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.