~bigbes/tarantool-etcd · parade

main · last commit 1 month ago · 2npkec0r

← Back to the parade

tarantool-etcd-3hm --max-request-bytes not enforced (uncapped gRPC body accumulation) Lined Up

status: open P2 bug etcd-changelog-sweep
bd update tarantool-etcd-3hm --claim bd close tarantool-etcd-3hm
Created byEugene Blikh
Ownerbigbes@gmail.com
Created2026-07-17T13:20:50Z
Updated2026-07-17T13:20:50Z
Description
etcd rejects requests over 1.5 MiB with InvalidArgument 'etcdserver: request is too large'.

gRPC: lib/nghttp2/grpc.lua:499-524 on_data_chunk accumulates stream.data_buf UNCAPPED — a large stream is a memory-growth vector, not just a conformance gap.
JSON: only a generic 4 MiB HTTP cap returning a bare 413 text body (lib/http1/server.lua:53,183-184,353-354), not the etcd error shape.
No such error constructor exists in app/etcd/errors.lua.

The fragmentation half of the 3.3 feature IS implemented (app/etcd/watch.lua:36-40).
Acceptance criteria
Request >1.5 MiB returns the etcd-shaped InvalidArgument on both wires; gRPC accumulation is capped and aborts early rather than buffering; limit configurable; error constructor added.

Depends on

No outgoing dependencies.

Depended on by

Nothing depends on this issue.

No comments.

  • Eugene Blikh created the issue · 2026-07-17T16:20:50Z
  • Eugene Blikh added label etcd-changelog-sweep · 2026-07-17T16:20:50Z
Stored rows — what this pane was built from, as read
issues 1 row
id tarantool-etcd-3hm
content_hash 2af875528846ea9fa87eb57f137dd3dc975608bbec8597c643bec1408ecb15d0
title --max-request-bytes not enforced (uncapped gRPC body accumulation)
description etcd rejects requests over 1.5 MiB with InvalidArgument 'etcdserver: request is too large'. gRPC: lib/nghttp2/grpc.lua:499-524 on_data_chunk accumulates stream.data_buf UNCAPPED — a large stream is a memory-growth vector, not just a conformance gap. JSON: only a generic 4 MiB HTTP cap returning a bare 413 text body (lib/http1/server.lua:53,183-184,353-354), not the etcd error shape. No such error constructor exists in app/etcd/errors.lua. The fragmentation half of the 3.3 feature IS implemented (app/etcd/watch.lua:36-40).
design
acceptance_criteria Request >1.5 MiB returns the etcd-shaped InvalidArgument on both wires; gRPC accumulation is capped and aborts early rather than buffering; limit configurable; error constructor added.
notes
status open
priority 2
issue_type bug
assignee NULL
estimated_minutes NULL
created_at 2026-07-17T13:20:50Z
created_by Eugene Blikh
owner bigbes@gmail.com
updated_at 2026-07-17T13:20:50Z
closed_at NULL
closed_by_session
external_ref NULL
spec_id
compaction_level 0
compacted_at NULL
compacted_at_commit NULL
original_size NULL
sender
ephemeral 0
wisp_type
pinned 0
is_template 0
mol_type
work_type
source_system
metadata <binary>
source_repo
close_reason
event_kind
actor
target
payload
await_type
await_id
timeout_ns 0
waiters
hook_bead
role_bead
agent_state
last_activity NULL
role_type
rig
due_at NULL
defer_until NULL
no_history 0
started_at NULL
is_blocked 0
labels 1 row
issue_id tarantool-etcd-3hm
label etcd-changelog-sweep
events 2 rows
id 019f703c-a36a-7e86-94d3-a497712532e1
issue_id tarantool-etcd-3hm
event_type created
actor Eugene Blikh
old_value
new_value
comment NULL
created_at 2026-07-17T16:20:50Z
id 019f703c-a36b-7a87-a7b2-85096c1bae40
issue_id tarantool-etcd-3hm
event_type label_added
actor Eugene Blikh
old_value NULL
new_value NULL
comment Added label: etcd-changelog-sweep
created_at 2026-07-17T16:20:50Z