containers / composefs

The reliability of disk images, the flexibility of files
Other
462 stars 37 forks source link

two more rust dumpfile parser hardenings #347

Closed cgwalters closed 2 months ago

cgwalters commented 2 months ago

dumpfile: Limit max inline content

Corresponding to what we did on the C side.

(Yeah, if we grow more of this we can try to use bindgen to share constants)

This I'm pretty sure is the last section of thing that accepted arbitrarily sized data.

Signed-off-by: Colin Walters walters@verbum.org


dumpfile: Deny content being set for non-regfiles

Just additional validation.

Signed-off-by: Colin Walters walters@verbum.org