Skip to content
This repository was archived by the owner on Oct 2, 2023. It is now read-only.

Conversation

@losfair
Copy link

@losfair losfair commented Aug 14, 2022

It looks like a remote denial-of-service (via stack overflow) on the server can be triggered by continuously sending SSLRequest, since handleSSLRequestMessage recursively calls serveConnStartup and the call from serveConnStartup to handleSSLRequestMessage isn't a tail call.

This PR introduces a startupState type for managing the lifecycle of the startup phase.

@losfair losfair force-pushed the cherry-pick/improve-startup-state branch from 2da9f3d to a02f1e4 Compare August 14, 2022 15:16
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant