3 ms·
Even before the untar phase, couldn't there be a vulnerability in: - your HTTPS stack - gzip encoded HTTP - your sha256 program
by hamandcheese 4y ago
Even before the untar phase, couldn't there be a vulnerability in:
- your HTTPS stack
- gzip encoded HTTP
- your sha256 program
- ilyt 4y agoYou'd probably want to limit the size of decompression so no 10TB of zeroes compressed to small size. But that's not that hard