37052f1561
Modifies the bbolt and mock tower databases to only accept blobs that are the expected size of the session's blob type. This prevents resource exhaustion attacks where a client may provide disproportionately large encrypted blob, even though all supported blob types are of fixed-size. |
||
---|---|---|
.. | ||
blob | ||
lookout | ||
wtclient | ||
wtdb | ||
wtmock | ||
wtpolicy | ||
wtserver | ||
wtwire | ||
conf.go | ||
config.go | ||
errors.go | ||
interface.go | ||
log.go | ||
standalone.go |