Add pointer fan-out DoS test databases and reader resource limits (STF-1553) - #282

Merged

horgh merged 21 commits into

mainfrom

Sep 2, 2026

Commits on Aug 31, 2026

Document reader resource limits for the pointer fan-out DoS

oschwald
and
claude
committed
a6c79bd
Add pointer fan-out DoS test databases

oschwald
and
claude
committed
f9493be
Add payload amplification DoS test databases

oschwald
and
claude
committed
5986edb
Add decoder resource limit boundary fixtures

oschwald
and
claude
committed
3056e15
Add cumulative decode path budget fixture

oschwald
and
claude
committed
b20fa64
Share one fixture map between the writer and the test

oschwald
and
claude
committed
6466330
Let the fixture tests accept a reader that enforces limits

oschwald
and
claude
committed
e7ab6b9
Document the denial of service test data

oschwald
and
claude
committed
254545a
Encode sizes above 28 correctly in the raw writers

oschwald
and
claude
committed
0cf3b51
Ignore the root-level write-test-data binary

oschwald
and
claude
committed
6c476b1

Commits on Sep 1, 2026

Harden raw MMDB fixture encoders
oschwald
committed
aa8a9cc
Strengthen resource limit fixture validation
oschwald
committed
7de1b2a
Define decoded value accounting guidance
oschwald
committed
c24bef7
Clarify decode and materialization boundaries
oschwald
committed
8262fb5
Remove unpublished advisory reference
oschwald
committed
bc1fa6c
Warn about hostile MMDB test fixtures
oschwald
committed
4ef895a
Document resource limit fixture policies
oschwald
committed
150f2af
Polish resource limit specification wording
oschwald
committed
a93cc69
Improve raw encoder boundary coverage
oschwald
committed
42c284e
Clarify resource limit fixture behavior
oschwald
committed
694acee
Clarify example payload limit terminology
oschwald
committed
0f06955