reiseburo/hotdog

Hotdog should not crash on oversized log lines when TLS is enabled

rtyler opened this issue · 2 comments

Based on the investigation from #1, there is a potential denial of service attack (intentional or not) when sending oversized lines to the daemon.

The better behavior is to disconnect the peer.

Oversized being 64k in #1, which is a silly-big log line to be sending

Filed the reproduction case upstream, since it appears to be a bug in async-tls and async-std: async-rs/async-std#796