Issues caused by reading arbitrary number of bytes

[serhiy-storchaka]

This is a meta-issue for a group of similar issues that have the same root cause: reading a number of bytes when the number is specified by the user/external source. Since read(n) is usually implemented by allocating a buffer of size n and then reading into it, this can cause arbitrary memory consumption which leads to swapping.

Linked PRs

• gh-141713: Prevent possible memory denial of service when reading #142022

[cmaloney]

There's a related PSRT that arbitrary-size reads should use non-linear buffer expansion: #119514 (comment)