[DISPATCH-1589] Policy integer settings not properly checked for overflow

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.10.0
• Component/s: Policy Engine
• Assignee: Charles E. Rolke
• Reporter: Charles E. Rolke
• Created: 06/Mar/20 22:14
• Updated: 06/Mar/20 22:14

Description

in config code policy maxFrameSize are treated as a 64-bit integer. When processed by policy code only the bottom 32 bits are placed into a signed 32-bit integer and then checked for a value > 0 at run time.

A config file with:

    "maxFrameSize": 3000000000

will set the internal policy value to

    maxFrameSize: -1294967296

Since this value is negative policy code uses the default value.

If policy is using only 31 bits then the policy compilers should reject values that don't fit in 31 bits.