From f451ce6c910e0edd2f1ba9ed77216cf23628b2f6 Mon Sep 17 00:00:00 2001 From: shortcutme Date: Wed, 9 Aug 2017 14:19:09 +0200 Subject: [PATCH] 6MB LimitedGzip file helper to avoid gzip bombs --- src/util/helper.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/util/helper.py b/src/util/helper.py index ac3037af..89e41042 100644 --- a/src/util/helper.py +++ b/src/util/helper.py @@ -194,3 +194,11 @@ def socketBindMonkeyPatch(bind_ip, bind_port): socket.bind_addr = (bind_ip, int(bind_port)) socket.create_connection_original = socket.create_connection socket.create_connection = create_connection + + +def limitedGzipFile(*args, **kwargs): + import gzip + class LimitedGzipFile(gzip.GzipFile): + def read(self, size=-1): + return super(LimitedGzipFile, self).read(1024*1024*6) + return LimitedGzipFile(*args, **kwargs)