1
0
mirror of https://github.com/php/php-src.git synced 2026-04-10 09:33:06 +02:00
Files
Christoph M. Becker 404e8bdb68 Fix #81726: phar wrapper: DOS when using quine gzip file
The phar wrapper needs to uncompress the file; the uncompressed file
might be compressed, so the wrapper implementation loops. This raises
potential DOS issues regarding too deep or even infinite recursion (the
latter are called compressed file quines[1]). We avoid that by
introducing a recursion limit; we choose the somewhat arbitrary limit
`3`.

This issue has been reported by real_as3617 and gPayl0ad.

[1] <https://honno.dev/gzip-quine/>
2022-09-09 17:10:04 +01:00
..
2018-01-28 21:51:25 +01:00
2019-07-21 00:49:35 +02:00
2012-10-10 10:27:49 +08:00
2018-01-28 21:51:25 +01:00
2018-02-08 10:32:08 +01:00
2018-01-15 12:20:10 +01:00
2015-05-10 02:24:29 -07:00
2018-09-21 14:12:25 +02:00
2016-02-15 09:00:07 +01:00
2016-03-09 14:16:29 +01:00
2020-09-03 10:29:38 +02:00
2016-06-21 16:20:03 +02:00
2018-12-02 12:06:13 -08:00
2019-10-10 16:14:21 +02:00
2021-08-23 23:43:32 -07:00
2019-07-21 00:49:35 +02:00
2019-05-14 10:11:29 +02:00
2016-11-20 14:16:50 +01:00
2019-05-14 10:11:29 +02:00
2019-05-14 10:11:29 +02:00
2018-06-30 15:35:43 +02:00