spdx / spdx/spdx-java-jackson-store

YAML files restricted to nearly 3MB

Open
#60 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
7
Forks
9
Avg merge
16h 42m
Merged PRs (30d)
9

Description

SnakeYaml introduced in version 1.32 a new property codePointLimit which is set to 3MB as default.
Now it is not possible to read spdx.yaml files which are larger than that limit.

The yamlFactory in the class MultiFormatStore has to be initialized with a bigger value.
The best would be do make this configurable from outside or during the initialization of the store.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by inspecting the yamlFactory initialization in MultiFormatStore and how SnakeYaml 1.32 applies its codePointLimit. Confirm the failure with an spdx.yaml file larger than 3MB, then make the limit configurable during store initialization or from outside and verify that larger files can be read.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.