Skip to content

StringDoS vulnerability (memory exhaustion) #3

@BioTomateDE

Description

@BioTomateDE

A malicious data file could create a very large string and put many GameMaker references to it. The references are only 4 bytes in the data file, but LibGM clones every read string. This could be used to crash the program with an "out of memory" error.

To prevent this, an AtomicUsize could be added that keeps track of cloned bytes amount and throws an error if they exceed some failsafe limit (20 MB?).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions