#2619·rqlite

No message size limit on Cluster Client reads

Author: otoolepCreated Apr 20, 2026Updated Sep 1, 2026
Labelsgood first issue

client.go:877 — reads 8-byte length prefix then allocates make([]byte, sz). Malicious peer can send sz=1<<63 causing OOM. Same on service side.