aws / aws/aws-encryption-sdk-python
potential issue with large reads on nonframed messages
- Lenguaje dominante
- Python
- Estrellas
- 255
- Forks
- 92
- Merge medio
- 2 d 17 h
- PR fusionados (30 d)
- 2
Descripción
In tracking down an issue in an unrelated codebase, I discovered that at least in some cases, passing more than 2GiB to the pyca/cryptography `Cipher.update()` methods can cause issues with the underlying OpenSSL implementation.
This is not an issue with framed messages because our max frame size is 2GiB, but could be an issue for nonframed messages larger than 2GiB.
We should add tests that check for this edge case, and if it is an issue we can add chunking logic.
Guía de contribución
Línea de trabajo
Start by reproducing the reported behavior with more than 2GiB passed to the pyca/cryptography Cipher.update() methods for a nonframed message, and compare it with framed messages. Add regression coverage for the edge case; done means large nonframed messages work reliably, with chunking logic added if the underlying OpenSSL issue is confirmed.
Escrito por el modelo de indexación a partir del texto del issue.
Evaluación
- Stack tecnológico
- python
- Área
- cryptography
- Tipo de issue
- Error
- Dificultad
- 4/5
- Tiempo estimado
- 3-5 días
- Estado de actividad
- Estancado
- Claridad
- Bastante claro
- Aptitud para principiantes
- 45/100