Downstream::new uses unbounded queues for incoming and outgoing SV2 frames. A connected peer can send frames faster than they are processed, causing the pool to retain an unlimited number of frames in memory without applying backpressure.
This can allow a remote peer to exhaust the pool's memory and cause a denial of service.
The transport queues should have bounded capacity or enforce an equivalent limit.
Downstream::new uses unbounded queues for incoming and outgoing SV2 frames. A connected peer can send frames faster than they are processed, causing the pool to retain an unlimited number of frames in memory without applying backpressure.
This can allow a remote peer to exhaust the pool's memory and cause a denial of service.
The transport queues should have bounded capacity or enforce an equivalent limit.