Skip to content

snappy_uncompress: allow capping the max output length #21

@dktapps

Description

@dktapps

Currently there is no easy way to set the max decompressed size using this extension. This means that snappy can be used for zip bombing attacks if it's used to compress user input.

A $max_decoded_len parameter, which limits the max size of the decompressed payload similar to zlib_decode(), would be nice to have.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions