Skip to main content

MAX_DECODE_DEPTH

Constant MAX_DECODE_DEPTH 

Source
const MAX_DECODE_DEPTH: usize = 128;
Expand description

Cap on recursive GeneralDeserializer::deserialize calls. Avro records may reference themselves ({"name":"X","type":"record","fields":[ {"name":"x","type":"X"}]}), so a malicious file plus matching wire bytes can recurse forever and overflow the stack.