Struct RespLimits 

#[non_exhaustive]
pub struct RespLimits {
    pub max_nesting_depth: usize,
    pub max_bulk_length: usize,
    pub max_collection_length: usize,
}

Limits the RESP parser enforces against hostile or corrupt server input.

These bound pathology, they do not police normal use: every default is generous enough for any legitimate reply, and is the value that was hardcoded before these became configurable. Raising one widens the resources a single reply can command; lowering one can reject replies a real server sends.

A frame breaching any limit fails the connection with the matching ClientError rather than being reported as a truncated read, so the streaming decoder never waits for bytes that will never come.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

max_nesting_depth: usize

Maximum collection-nesting depth accepted before a frame is rejected with MaxNestingDepthExceeded.

RESP replies are shallow in practice — a handful of levels for the deepest cluster and stream introspection commands — so this stops a crafted *1\r\n*1\r\n… reply from driving the parser into a stack overflow, which unlike a panic is not catchable and aborts the whole process. The element loop is iterative, so this bounds the parser’s explicit stack (and the recursion left in attribute skipping) rather than the call stack.

The default is 128.

max_bulk_length: usize

Maximum byte length accepted for a single bulk string, bulk error or verbatim string, checked against the declared header before the payload is trusted; breaching it raises BulkLengthTooLarge.

Matches Redis’s own proto-max-bulk-len default. Raise it only if the server’s is also raised.

The default is 512 MiB.

max_collection_length: usize

Maximum number of elements accepted in a single collection — array, set, push or map, counted after the map key/value doubling; breaching it raises CollectionLengthTooLarge.

Bounds an attacker-controlled loop count and the buffer pre-reservation derived from it.

The default is 128 Mi elements.

Implementations

impl RespLimits

pub const DEFAULT: Self

The default limits, usable in a const context.

Trait Implementations

impl Clone for RespLimits

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RespLimits

impl Debug for RespLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RespLimits

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RespLimits

where RespLimits: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RespLimits

impl PartialEq for RespLimits

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RespLimits

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RespLimits