3 ms·

Zip and PNG bombs have been around for a while: https://github.com/0x48piraj/gz-bomb https://github.com/0x48piraj/gz-bomb https://libpng.sourceforge.io/decompre

by wmf 12d ago

Zip and PNG bombs have been around for a while: https://github.com/0x48piraj/gz-bomb https://github.com/0x48piraj/gz-bomb https://libpng.sourceforge.io/decompression_bombs.html https://libpng.sourceforge.io/decompression_bombs.html

est 12d ago
I mean "mild" bombs where the final output bytes looks normal, a regular sized image, but the decompressing steps takes unnecessarily long, eating CPU or/and RAM
eru 12d ago
You can also have a zip that decompresses to itself: https://research.swtch.com/zip https://research.swtch.com/zip