From e6581519dd4f01719744e6a39d4a3bf44583e07b Mon Sep 17 00:00:00 2001 From: root Date: Thu, 2 Oct 2025 21:10:10 +0200 Subject: [PATCH] wallet_rpc_server: add HTTP body size limit Set m_max_content_length to MAX_RPC_CONTENT_LENGTH (1MB) to match the protection already implemented in core_rpc_server. This prevents memory exhaustion attacks via unlimited HTTP request sizes. --- src/wallet/wallet_rpc_server.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/src/wallet/wallet_rpc_server.cpp b/src/wallet/wallet_rpc_server.cpp index 77613482d..f4a1b0d19 100644 --- a/src/wallet/wallet_rpc_server.cpp +++ b/src/wallet/wallet_rpc_server.cpp @@ -398,6 +398,7 @@ namespace tools } m_net_server.set_threads_prefix("RPC"); + m_net_server.get_config_object().m_max_content_length = MAX_RPC_CONTENT_LENGTH * 100; auto rng = [](size_t len, uint8_t *ptr) { return crypto::rand(len, ptr); }; return epee::http_server_impl_base::init( rng, std::move(bind_port), std::move(rpc_config->bind_ip),