From 9803f6852218bceaa823b7dafdff5970be5112ed Mon Sep 17 00:00:00 2001 From: Klaus Post Date: Thu, 6 Apr 2023 17:47:38 -0700 Subject: [PATCH] snowball: Restrict zstd window size (#16987) --- cmd/untar.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cmd/untar.go b/cmd/untar.go index 49d0b3962..afbae59f8 100644 --- a/cmd/untar.go +++ b/cmd/untar.go @@ -144,7 +144,8 @@ func untar(ctx context.Context, r io.Reader, putObject func(reader io.Reader, in case formatS2: r = s2.NewReader(bf) case formatZstd: - dec, err := zstd.NewReader(bf) + // Limit to 16 MiB per stream. + dec, err := zstd.NewReader(bf, zstd.WithDecoderMaxWindow(16<<20)) if err != nil { return err }