hacnho/protobuf-gosettings-renamed-services-dos-poc

Protocol Buffers GoSettings renamed_services materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated map-entry materialization during client_pb2.GoSettings.ParseFromString(...).

Files:

• control_one_renamed_service.pb
• malicious_renamed_services_1200000.pb
• reproduce.py

Observed behavior:

• control artifact:
  • parses successfully with one renamed_services entry
  • first_key_len = 13281508
• malicious artifact:
  • both files are 13,281,520 bytes
  • parses successfully with 1,200,000 renamed_services entries
  • increases peak RSS by about 119732 kB in local clean-process replay

Tested runtime:

• protobuf==7.35.1
• Python: /usr/bin/python3

Public files:

• https://huggingface.co/hacnho/protobuf-gosettings-renamed-services-dos-poc/resolve/main/control_one_renamed_service.pb
• https://huggingface.co/hacnho/protobuf-gosettings-renamed-services-dos-poc/resolve/main/malicious_renamed_services_1200000.pb
• https://huggingface.co/hacnho/protobuf-gosettings-renamed-services-dos-poc/resolve/main/reproduce.py
• repo sha: b61f684b6a6368e305c98c8839230bc5f15c823f

Reproduction:

python3 reproduce.py

Latest replay snapshots:

• local replay:
  • vmhwm_delta_kb = 119732
  • elapsed_ratio = 17.29
• public replay:
  • vmhwm_delta_kb = 119784
  • elapsed_ratio = 14.17