aws / aws/aws-encryption-sdk-python
potential issue with large reads on nonframed messages
未关闭
bug
- 主要语言
- Python
- 星标
- 255
- 派生
- 92
- 平均合并
- 2 天 17 小时
- 30 天内合并 PR
- 2
描述
In tracking down an issue in an unrelated codebase, I discovered that at least in some cases, passing more than 2GiB to the pyca/cryptography `Cipher.update()` methods can cause issues with the underlying OpenSSL implementation.
This is not an issue with framed messages because our max frame size is 2GiB, but could be an issue for nonframed messages larger than 2GiB.
We should add tests that check for this edge case, and if it is an issue we can add chunking logic.
贡献指南
调研方向
首先,通过将超过 2GiB 的数据传递给非分帧消息的 pyca/cryptography Cipher.update() 方法来复现已报告的行为,并将其与分帧消息进行比较。为该边界情况添加回归测试;完成的标准是大型非分帧消息能够可靠工作,并在确认底层 OpenSSL 问题后添加分块逻辑。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- python
- 领域
- cryptography
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 45/100