diff options
| author | Mårten Nordheim <marten.nordheim@qt.io> | 2020-08-19 12:47:47 +0200 |
|---|---|---|
| committer | Mårten Nordheim <marten.nordheim@qt.io> | 2020-09-22 19:08:53 +0200 |
| commit | a07f35409bc1e129b027fc7ccb312949a454f66e (patch) | |
| tree | 84cde42e8d76a0eb0abbaddf474975eb8393a57f /src/network/access/qhttp2protocolhandler.cpp | |
| parent | 16a1ddd73337c2622499c77b12de9395d43aba87 (diff) | |
QDecompressHelper: limit decompression ratio
To avoid potential decompression bombs. This is implemented with just
a simple check that the ratio doesn't pass some hardcoded preset.
Change-Id: I17246f0f43e73280cdb35a8f03d65885f5678ad6
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Diffstat (limited to 'src/network/access/qhttp2protocolhandler.cpp')
| -rw-r--r-- | src/network/access/qhttp2protocolhandler.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/network/access/qhttp2protocolhandler.cpp b/src/network/access/qhttp2protocolhandler.cpp index 44c397c882..de6b5ac18f 100644 --- a/src/network/access/qhttp2protocolhandler.cpp +++ b/src/network/access/qhttp2protocolhandler.cpp @@ -1167,6 +1167,8 @@ void QHttp2ProtocolHandler::updateStream(Stream &stream, const HPack::HttpHeader httpReplyPrivate->removeAutoDecompressHeader(); httpReplyPrivate->decompressHelper.setEncoding( httpReplyPrivate->headerField("content-encoding")); + if (httpReplyPrivate->request.ignoreDecompressionRatio()) + httpReplyPrivate->decompressHelper.setArchiveBombDetectionEnabled(false); } if (QHttpNetworkReply::isHttpRedirect(statusCode) |