Skip to content

update cel-cpp#8746

Merged
lizan merged 1 commit intoenvoyproxy:masterfrom
kyessenov:update_cel
Oct 24, 2019
Merged

update cel-cpp#8746
lizan merged 1 commit intoenvoyproxy:masterfrom
kyessenov:update_cel

Conversation

@kyessenov
Copy link
Copy Markdown
Contributor

Signed-off-by: Kuat Yessenov kuat@google.com

Description: update CEL runtime to tighten the complexity bounds:

  • remove comprehension operators (forall, exists)
  • remove list and string concat to avoid memory allocation
  • limit RE2 regex max program size
  • remove string conversion to avoid string allocation

Risk Level: low
Testing: unit tests
Docs Changes: remove upstream.mtls attribute due to ongoing #8464
Release Notes:

Signed-off-by: Kuat Yessenov <kuat@google.com>
@lizan lizan merged commit c57801c into envoyproxy:master Oct 24, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants