eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: bound remote iroh line reads

Browse source
This commit is contained in:
Eric Wendland 2026-07-05 18:22:07 +02:00
commit ccd40f0224
5 changed files with 91 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/production-readiness-roadmap.md
View file

@ -169,12 +169,12 @@ Goal: finish the authorization and remote-input audit before deployment.
- `[ ]` Tests cover bearer secrets with wrong capabilities.
- `[ ]` Tests cover bearer attempts to mutate trust graph state.
- `[ ]` Bound all remote input paths.
- `[x]` Bound all remote input paths.
Acceptance criteria:
- `[ ]` Remote request payloads have documented size limits.
- `[ ]` Remote stream reads have timeouts or bounded behavior.
- `[ ]` Oversized messages are rejected without state mutation.
- `[ ]` Tests cover oversized payload denial for representative protocols.
- `[x]` Remote request payloads have documented size limits.
- `[x]` Remote stream reads have timeouts or bounded behavior.
- `[x]` Oversized messages are rejected without state mutation.
- `[x]` Tests cover oversized payload denial for representative protocols.
- `[ ]` Audit host-opening paths.
Acceptance criteria: