hacnho/protobuf-metricrule-metric-costs-dos-poc

Protocol Buffers MetricRule metric_costs materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated map-entry materialization during quota_pb2.MetricRule.ParseFromString(...).

Files:

• control_one_metric_cost.pb
• malicious_metric_costs_1200000.pb
• reproduce.py

Observed behavior:

• control artifact:
  • parses successfully with one metric_costs entry
  • first_key_len = 13281508
• malicious artifact:
  • both files are 13,281,520 bytes
  • parses successfully with 1,200,000 metric_costs entries
  • increases peak RSS by about 101448 kB in local clean-process replay

Tested runtime:

• protobuf==7.35.1
• Python: /usr/bin/python3

Public files:

• https://huggingface.co/hacnho/protobuf-metricrule-metric-costs-dos-poc/resolve/main/control_one_metric_cost.pb
• https://huggingface.co/hacnho/protobuf-metricrule-metric-costs-dos-poc/resolve/main/malicious_metric_costs_1200000.pb
• https://huggingface.co/hacnho/protobuf-metricrule-metric-costs-dos-poc/resolve/main/reproduce.py
• repo sha: 56d2eb83ab987dee30fec093afe078f9529e1c82

Latest replay snapshots:

• local replay:
  • vmhwm_delta_kb = 101448
  • elapsed_ratio = 12.92
• public replay:
  • vmhwm_delta_kb = 101528
  • elapsed_ratio = 13.81