AIKIDO-2026-202191

TL;DR

The c_glib protocol dispatch recurses while decoding nested Thrift structures without an effective bound tied to the incoming message. A crafted message with deeply nested fields drives that recursion until the native call stack is exhausted. Processing such input aborts the server handling the connection, causing a denial of service. The fix constrains nesting depth so untrusted payloads cannot recurse without bound.