Re: Stopping zipbombs with Sophie

Hi Martin,

I'm not sure exactly how you would go about using the volume decompressed 
- you'd have to modify some of the code in Sophie. However, the 
SOPHOS_ACTIVITY_DECOMPR is called regularly - once every few hundred K of 
data processed. So counting the number of times that OkToContinue is 
called does provide you with a shorthand way of checking this. 
Alternatively, there is now a SAVI configuration option "EnableAutoStop". 
If you set this value to "1" then it will enable some built-in zipbomb 
detection that will prevent this kind of thing happening.

Regards
Rich

On 31/12/2004 13:20:18 vtools-bounces wrote:

>Hi
>
>I'm trying to set a limit on the disk space used by Sophie while
>decompressing files. I don't want a 1 Megabyte zipped file being
>decompressed to 1 Gigabyte of zeros. Is there some way to do this?
>
>I've seen the limit_decompr parameter. It seems to limit the number of
>times the function CISaviNotify_OkToContinue may be called with scanning
>activity set to SOPHOS_ACTVTY_DECOMPR. But wouldn't it be more useful to
>count the data volume decompressed as given in the Extent argument?
>
>Thanks,
>
>Martin Zuziak <[email protected]>
>
>
>_______________________________________________
>vtools mailing list
>[email protected]
>http://www.vanja.com/list/listinfo.cgi/vtools