[CASSANDRA-4731] Custom CQL transport needs to validate its framing

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 1.2.0 beta 3
• Component/s: Legacy/CQL
• Assignee: Sylvain Lebresne
• Reporter: Tupshin Harper

Authors

Sylvain Lebresne

• Created: 28/Sep/12 12:23
• Updated: 16/Apr/19 09:32
• Resolved: 08/Nov/12 13:31

Description

The current implementation of CASSANDRA-2478 does very little validation of its input. At a minimum, it should validate that the header bytes are all correct types, and validate that the frame as a whole doesn't exceed the max message length as specified in the header. As soon as it sees an invalid frame, it should return an error to the client and close the connection.