db2f920d96
Zebra believes the untrusted `JoinSplit` list size field when deserializing `JoinSplit`s, and preallocates a `Vec` based on that size. This is trivial a memory exhaustion attack. Instead, use the current auto-growing implementation, which is limited by the size of the message data. |
||
---|---|---|
.. | ||
proptest-regressions | ||
src | ||
Cargo.toml |