OTP inets max_clients default fix: unbounded connections causing resource exhaustion

Key Vulnerability Information Summary Vulnerability Overview Commit Message: Problem Description: The documentation specifies that the default value of is 150, but the implementation code did not adhere to this default value, resulting in unlimited client connections being allowed. Committer: ozzadiaz (author) and Whalee (committer) Commit Hash: Commit Time: 2 weeks ago Scope of Impact Affected Files (4 files modified in total): - - - - Affected Module: The library (HTTP server) in Erlang/OTP Affected Behavior: When is not explicitly configured, the HTTP server failed to apply the documented default value of 150, allowing an unlimited number of client connections, creating a risk of resource exhaustion due to the lack of an upper limit on the number of connections. Fix Details In , the logic in for checking if the connection count exceeds was changed from to , replacing the hardcoded macro with the documented default value 150. In , the macro definition was changed from (a very large number, effectively unlimited) to . In the test file , test cases were added/modified to verify the behavior of the default value, ensuring the default is 150. In , the assertion for the default value of was changed from to the explicit value , and a test for the default value of was added. POC / Key Code Snippets 1. Macro Definition Change in (Original value was a very large number, effectively unlimited) 2. Connection Count Check Logic in (Note: The actual code uses a recursive/nested structure to reject new connections when the connection count reaches .) 3. Test Case in 4. Test Assertion in ```erlang [{group, http_basic}, {init_per_group, [uri_to_long_404, {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {ok, Pid} = file:open(Pwd, [write]), {o

Goal Reached Thanks to every supporter — we hit 100%!

OTP inets max_clients default fix: unbounded connections causing resource exhaustion

More from this source