Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Harden set of acceptable inputs for deserialization #114

Open
ralexstokes opened this issue May 14, 2020 · 0 comments
Open

Harden set of acceptable inputs for deserialization #114

ralexstokes opened this issue May 14, 2020 · 0 comments

Comments

@ralexstokes
Copy link
Member

We want to make sure that this library is hardened against "extra inputs" during deserialization, where the data provided is longer than strictly required for the deserialization.

An example (that currently fails) with ssz.sedes.Bitlist:

Bitlist(2).deserialize(b'\x07\x00\x00\x00')  # => (True, True)

when the 3 extra \x00 bytes should raise an exception.

The current behavior is to simply ignore them.

pacrob pushed a commit to pacrob/py-ssz that referenced this issue Dec 1, 2023
* Ignore all __pycache__ directories

* Newsfragment

* Revert Newsfragment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant