mirror of
https://github.com/openwrt/packages.git
synced 2026-10-14 18:37:03 +04:00
Hardens the reader against crafted databases: decoding now caps a record at 65536 values, 512 levels of nesting and 2 MiB of string and bytes payload, rejects unsigned integers over 16 bytes and signed ones over 4 bytes before reading their payload, and rejects an invalid search tree size when opening a database. Those, and the truncated reads that used to surface as IndexError or struct.error, all raise InvalidDatabaseError now. Upstream vendors libmaxminddb 1.14.0 for the same limits in the C extension; this package links the feed's libmaxminddb instead, so that half arrives with a libmaxminddb bump. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>