hacnho/protobuf-selectivegapicgeneration-methods-dos-poc

Protocol Buffers SelectiveGapicGeneration methods materialization DoS PoC

This repository contains a benign security research PoC for a .pb artifact that drives repeated-string materialization during client_pb2.SelectiveGapicGeneration.ParseFromString(...).

Files:

• control_one_method.pb
• malicious_methods_5000000.pb
• reproduce.py

Exact public file URLs:

• https://huggingface.co/hacnho/protobuf-selectivegapicgeneration-methods-dos-poc/resolve/main/control_one_method.pb
• https://huggingface.co/hacnho/protobuf-selectivegapicgeneration-methods-dos-poc/resolve/main/malicious_methods_5000000.pb
• https://huggingface.co/hacnho/protobuf-selectivegapicgeneration-methods-dos-poc/resolve/main/reproduce.py

Expected signal:

• control:
  • methods_len = 1
  • first_method_len = 9999995
• malicious:
  • methods_len = 5000000
• latest local replay:
  • vmhwm_delta_kb = 199688
  • elapsed_ratio = 12.22
• latest public replay:
  • vmhwm_delta_kb = 199808
  • elapsed_ratio = 10.82