Req #74876 [Asn]: Add maxSize option for inflate_init

From: Date: Tue, 09 Nov 2021 12:39:44 +0000
Subject: Req #74876 [Asn]: Add maxSize option for inflate_init
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-237650@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=74876&edit=1

 ID:                 74876
 Updated by:         cmb@php.net
 Reported by:        kelunik@php.net
 Summary:            Add maxSize option for inflate_init
 Status:             Assigned
 Type:               Feature/Change Request
 Package:            Zlib related
 PHP Version:        Next Minor Version
 Assigned To:        bwoebi
 Block user comment: N
 Private report:     N

 New Comment:

Documented: <https://github.com/php/doc-en/commit/b9d23bbb94e5e0b71c3f4a8c12f3671f64516370>.


Previous Comments:
------------------------------------------------------------------------
[2017-07-07 15:35:02] kelunik@php.net

Description:
------------
There should be a maxSize option for inflate_init to protect against things like https://blog.haschek.at/2017/how-to-defend-your-website-with-zip-bombs.html

Without such an option it's always possible for servers to crash clients with such a gzipped
response.



------------------------------------------------------------------------



--
Edit this bug report at https://bugs.php.net/bug.php?id=74876&edit=1

Thread (2 messages)

« previous php.bugs (#237650) next »