Filesystem Decompression Bomb

Directly decompressing files or buffers may lead to a potential Denial of Service (DoS) due to a decompression bomb. Decompression bombs are maliciously compressed files or data that decompresses to extremely large sizes. This can cause the process to run out of memory, or the disk to fill up. To protect against decompression bombs, an [io.LimitReader(...)](

IndexedPublic repositoryMediumHigh confidenceVerifiedApache-2.0

greprules fetch gitlab-sast-go-filesystem-rule-decompression-bomb --engine opengrep

Description

License: Apache-2.0
Source context: Public repository
Source: https://gitlab.com/gitlab-org/security-products/sast-rules
Validation status: Verified
Quality signals: 3.5K downloads
0 direct3.5K via packs
· 0 stars · Quality score 92How quality works
Included packs: 2 packs

Community feedback

0 rule-level signals from signed-in users.

Useful reports: 0
Context false positives: 0
Metadata suggestions: 0

Contextual precision

Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.

Findings observed: 0
Projects: 0
Reporters: 0

Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.

Finding verdicts0

No approved finding verdicts yet.

Scan diagnostics0

No scan diagnostics reported yet.