Summary

SseAutoReconnectStream::poll_next recursed into itself for every event it skips, plus once more on every state transition. A burst of skipped events overflows the stack and aborts the process.

Four sites, all in crates/rmcp/src/transport/common/client_side_sse.rs:

The inner SseStream returns Poll::Ready for every event it can parse out of already-buffered bytes, so a run of skipped events has no yield point between them. Each one adds a poll_next frame, and that frame is large — the function is a big match with several locals.

Reproduction

A server that emits a run of non-JSON message frames is enough. On main, with 50,000 such frames:

thread '...::skipped_events_do_not_grow_the_stack' has overflowed its stack
fatal runtime error: stack overflow, aborting
error: test failed ... (signal: 6, SIGABRT: process abort signal)

This is a client-side abort of the whole process, not a stream error the caller can handle.

The change

Wrap the body of impl Stream for SseAutoReconnectStream::poll_next in a loop and replace the four self.poll_next(cx) tail calls with continue. this is re-derived from self.as_mut().project() at the top of each iteration, so the borrows end cleanly per iteration. No other logic changes — same branches, same order, same returns.

Review with ?w=1. The functional change is four keywords; the rest of the diff is the resulting re-indent of the body.

Testing

Adds skipped_events_do_not_grow_the_stack to the existing tests module in the same file, in the style of the neighbouring oversized_event_returns_error_without_reconnecting. It feeds 50,000 undeserializable frames through the stream and asserts it terminates.

Verified against both states of the source — the test aborts with SIGABRT on unmodified main and passes on this branch, so a regression is caught rather than silently reintroduced.

cargo test -p rmcp --lib --features client-side-sse,client
  this branch:  226 passed; 0 failed
  main:         225 passed; 0 failed

Exactly +1, and no pre-existing failure on either side. cargo fmt -p rmcp -- --check is clean and touched only this file. cargo clippy -p rmcp --lib --features client-side-sse,client exits 0 (7 never used warnings, all pre-existing and all a consequence of building that narrow feature set).

Notes

Toolchain. Built with stable 1.97.1; rust-toolchain.toml pins 1.96 and .githooks runs cargo +nightly fmt. I have no rustup on this machine, so the formatting was applied with stable rustfmt — the repo's nightly-only options (imports_granularity, group_imports) were skipped with a warning. My hunk changes no imports and the only reflow was line-wrapping, which is identical on both channels, but CI on 1.96 is the authoritative check.

Deliberately not fixed. The 405 → ServerDoesNotSupportSse mapping in the reqwest get_stream path is missing its 401/403 WWW-Authenticate counterparts, which silently disables AuthClient's token-refresh retry — the sibling post_message in the same file handles both. That is a separate concern and belongs in its own PR; happy to send it if useful.

AI assistance disclosure (added after merge)

Per the modelcontextprotocol AI policy: this change was made in conjunction with my pair programmer, Claude Code.

I checked this repo's CONTRIBUTING.md before filing, found no AI clause, and wrongly concluded none applied — AI_POLICY.md lives in the specification repo and its Scope section covers every repository in the org, SDKs included. My error, corrected here as soon as I found it.

Extent: the defect was surfaced by an automated sweep I run across MCP-ecosystem repos, and the patch was written with Claude Code working alongside me. The verification above is my own — the fatal runtime error: stack overflow / SIGABRT reproduction on unmodified main, the 226-vs-225 baseline, and the fmt/clippy runs were executed on my machine. I understand the change and can answer questions on it directly.