feat(variables): Begin reading minidump memory for variables - #2035
Merged
@sentry/warden / warden
completed
Aug 31, 2026 in 0s
1 issue
Medium
Variable extraction materializes attacker-sized memory dumps without an output cap - `crates/symbolicator-native/src/symbolication/native.rs:60`
When variable extraction is enabled, a SymCache-derived primitive or pointer size controls the minidump range read for a frame-offset variable. Although the memory accessor checks that the range exists, a successful range can be as large as the accepted dump and format!("{s:?}") materializes an uncapped, substantially larger String that is retained in the response, potentially exhausting worker memory.
Also found at:
crates/symbolicator-native/src/symbolication/native.rs:256-258
2 skills analyzed
| Skill | Findings | Duration | Cost |
|---|---|---|---|
| security-review | 0 | 3m 30s | $1.57 |
| wrdn-dos-review | 1 | 21m 9s | $4.41 |
⏱ 24m 39s · 7.0M in / 299.9k out · $5.98
Loading