Re: no ressource limits when extracting files?

On Wed, 14 Jan 2004 20:11:12 +0100
Andy Hilker <[email protected]> wrote:

> > limit_decompr could be used for what you need. Let me know if it works
> > for you.
> 
> No, it does not work:
> With a bzip2 file (original size: more than 1 GB, packed size 431
> bytes) sophie unpacks and unpacks... I see no effect on RAM (there
> seems to be a limit) but heavy cpu.
<snip>

Right. I quickly read your message, and assumed this was an issue of
recursively-packed files. I see now that you're talking about 'new' bzip2
bombs (recently also discussed on Full-Disclosure and other lists).

To be perfectly honest, I don't think Sophie is supposed to take care of
this issue.

Either Sophos (in their lib) or ulimits on the system should worry about
such issues, and I don't see a way Sophie could prevent this issue.

Any suggestions are, of course, more than welcome :)

Thanks.

Vanja