Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 9/14/26 11:00, Evgenios Gkritsis wrote:
> I plan to reference this in a research paper on algorithmic-complexity
> vulnerabilities in protocol parsers. I will not disclose publicly until a
> fix is published or 90 days have passed.

You disclosed publicly by mailing to the public oss-security mailing list:

https://www.openwall.com/lists/oss-security/2026/09/14/28

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris