No message size limit on Cluster Client reads
Author: otoolepCreated Apr 20, 2026Updated Sep 1, 2026
Labelsgood first issue
client.go:877 — reads 8-byte length prefix then allocates make([]byte, sz). Malicious peer can send sz=1<<63 causing OOM. Same on service side.
Source: rqlite/rqlite