php-ext-snappy icon indicating copy to clipboard operation
php-ext-snappy copied to clipboard

snappy_uncompress: allow capping the max output length

Open dktapps opened this issue 3 years ago • 0 comments

Currently there is no easy way to set the max decompressed size using this extension. This means that snappy can be used for zip bombing attacks if it's used to compress user input.

A $max_decoded_len parameter, which limits the max size of the decompressed payload similar to zlib_decode(), would be nice to have.

dktapps avatar Oct 10 '22 08:10 dktapps