Allow the constraint for unstreaming size to be configured at startup...
int property com.threerings.io.maxContainerSize
This commit is contained in:
@@ -31,7 +31,8 @@ public class BasicStreamers
|
|||||||
* The maximum number of elements allowed in a deserialized array, collection, or map. This
|
* The maximum number of elements allowed in a deserialized array, collection, or map. This
|
||||||
* prevents a malicious client from sending a huge size value to trigger an OutOfMemoryError.
|
* prevents a malicious client from sending a huge size value to trigger an OutOfMemoryError.
|
||||||
*/
|
*/
|
||||||
public static final int MAX_CONTAINER_SIZE = 65536;
|
public static final int MAX_CONTAINER_SIZE =
|
||||||
|
Integer.getInteger("com.threerings.io.maxContainerSize", 65536);
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Validates that a container size read from the stream is non-negative and within bounds.
|
* Validates that a container size read from the stream is non-negative and within bounds.
|
||||||
|
|||||||
Reference in New Issue
Block a user