Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set the code point limit for SnakeYAML to 1GB #6124

Merged
merged 1 commit into from
Nov 28, 2022

Conversation

mnonnenmacher
Copy link
Member

Since version 1.32 1 SnakeYAML sets the limit for incoming data to 3MB. Since Jackson 2.14 2 it is possible to override this default, so hardcode the limit to 1GB to allow parsing large ORT result files.

Since version 1.32 [1] SnakeYAML sets the limit for incoming data to
3MB. Since Jackson 2.14 [2] it is possible to override this default, so
hardcode the limit to 1GB to allow parsing large ORT result files.

[1]: https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes
[2]: FasterXML/jackson-dataformats-text#337

Signed-off-by: Martin Nonnenmacher <martin.nonnenmacher@bosch.io>
@mnonnenmacher mnonnenmacher requested a review from a team as a code owner November 28, 2022 13:48
@sschuberth
Copy link
Member

Should this auto-close #5818?

@sschuberth
Copy link
Member

Also, should we add a test that writes a 4 MiB dummy YAML file?

@sschuberth
Copy link
Member

Let's address my remarks manually / separately and merge this to fixup #6123 for the changes.

@sschuberth sschuberth merged commit b0beba8 into main Nov 28, 2022
@sschuberth sschuberth deleted the snakeyaml-code-point-limit branch November 28, 2022 14:40
@sschuberth sschuberth added the release notes Changes that should be mentioned in release notes label Dec 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release notes Changes that should be mentioned in release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants