Re: no ressource limits when extracting files?

Vanja Hrustic <[email protected]>
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
On Wed, 14 Jan 2004 18:24:03 +0100
Andy Hilker <[email protected]> wrote:

> Hi,
> 
> because of latest news about DoS with compressed files, i have
> experimenting with bzip bombs.
> Sweep unpacks on tmp directory and complains/stops when file system
> is full.
> Sophie unpacks in RAM...
> 
> Is there no configuration option like "maximum recursion level" and
> "maximum unpacked bytes"?

Please check the "Callbacks and remote socket check" section of README
(3.04rc1) file.

Although I didn't them much (nor can guarantee that there are no bugs),
callbacks could be used in order to limit amount of work Sophie does.

limit_decompr could be used for what you need. Let me know if it works for
you.

Vanja
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.