aws / aws/aws-encryption-sdk-python
potential issue with large reads on nonframed messages
未關閉
bug
- 主要語言
- Python
- 星號
- 255
- 分支
- 92
- 平均合併
- 2 天 17 小時
- 30 天內合併 PR
- 2
描述
In tracking down an issue in an unrelated codebase, I discovered that at least in some cases, passing more than 2GiB to the pyca/cryptography `Cipher.update()` methods can cause issues with the underlying OpenSSL implementation.
This is not an issue with framed messages because our max frame size is 2GiB, but could be an issue for nonframed messages larger than 2GiB.
We should add tests that check for this edge case, and if it is an issue we can add chunking logic.
貢獻指南
研究方向
首先,將超過 2GiB 的資料傳遞給非分框訊息的 pyca/cryptography Cipher.update() 方法,以重現已回報的行為,並與分框訊息進行比較。為此邊界案例新增回歸測試;完成的標準是大型非分框訊息能可靠運作,並在確認底層 OpenSSL 問題後加入分塊邏輯。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- python
- 領域
- cryptography
- Issue 類型
- 缺陷
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 基本清楚
- 新手友好度
- 45/100