4 ms·
I think the most interesting bit here is this: > Now, the more astute reader will point out that I just sent over 4 gigabytes of data over the internet; and th
by nikic 11y ago
I think the most interesting bit here is this:
> Now, the more astute reader will point out that I just sent over 4 gigabytes of data over the internet; and that this can’t really be all that interesting - but that argument is readily countered with gzip encoding, reducing the required data to a 4 megabyte payload.
This was pretty much my first thought on seeing the IOBuffer signature - "That exploit payload is going to be huge". But things are not always as they seem and using gzip to generate a large string on the client is something I had not previously considered.
- ceequof 11y agoYou can blow up all sorts of things with gzip: https://en.wikipedia.org/wiki/Zip_bomb https://en.wikipedia.org/wiki/Zip_bomb