Detect and disallow compression bombs

2024-12-06 19:41:15 +01:00 · 2011-01-03 15:54:23 -05:00
parent e365aee971
commit 64798dab4f
2 changed files with 54 additions and 2 deletions
@@ -0,0 +1,5 @@
+  o Major bugfixes (security):
+    - Prevent a DoS attack by disallowing any zlib-compressed data
+      whose compression factor is implausibly high.  Fixes the
+      second part of bug2324; found by doors.
+