thodg/libgit2/fuzzers

Diff

  • Show log

    Commit

  • Hash : e38ddc90
    Author : Patrick Steinhardt
    Date : 2018-07-26T15:41:41 

    fuzzers: limit maximum pack object count

By default, libgit2 allows up to 2^32 objects when downloading a
packfile from a remote. For each of these objects, libgit2 will allocate
up to two small structs, which in total adds up to quite a lot of
memory. As a result, our fuzzers might run out of memory rather quick in
case where they receive as input a packfile with such a huge count of
objects.

Limit the packfile object count to 10M objects. This is sufficiently big
to still work with most largish repos (linux.git has around 6M objects
as of now), but small enough to not cause the fuzzer to OOM.

kmx.io     mail     discord kmxgit v0.4.0