Jens Geyer created THRIFT-6286:
----------------------------------
Summary: Go: TConfiguration has no container-size limit
Key: THRIFT-6286
URL: https://issues.apache.org/jira/browse/THRIFT-6286
Project: Thrift
Issue Type: Improvement
Components: Go - Library
Reporter: Jens Geyer
Go's {{TConfiguration}} ({{lib/go/thrift/configuration.go}}) exposes
{{MaxMessageSize}}, {{MaxFrameSize}} and the recursion limit, but no limit on a
container's declared element count. The C++ ({{container_limit_}}), Java
({{containerLengthLimit_}}) and D ({{containerSizeLimit}}) bindings each expose
such a knob. A Go caller that wants to bound the element count a decoder
accepts before it sizes a collection has no equivalent setting.
h2. Suggested
Add a container-size limit to {{TConfiguration}} and consult it where a
container's declared element count is read, following the shape the other
bindings use. It is a public API addition, so it belongs in normal review.
_Drafted with AI assistance (Claude Opus 4.8); reviewed and filed by Jens
Geyer._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
