Re: uncompression-bombs

[Zooko <zooko@zooko.com>]

 I, Zooko, wrote:
>
> That's a good idea about limiting uncompressed-text size.  I wrote Python code 
> to do that for Mojo Nation:
> 
> http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/pyutil/pyutil/zlibutil.py?rev=HEAD&content-type=text/vnd.viewcvs-markup
> 
> It doesn't say so explicitly in that file, but the same code can be used to spool
> the uncompressed-text directly to disk while maintaining a cap on the amount of 
> RAM used at any one time.

Whoops.  Actually that wasn't true when I wrote it, but I just committed a patch 
that makes it true, as well as fixes a couple of bugs that I noticed.  (The 
significant bug meant that it could use about twice as much memory as you had 
specified.)

Regards,

Zooko

---
                 zooko.com
Security and Distributed Systems Engineering
---