bodgit / sevenzip / 26266804322

75%

main: 75%

Pull #453

github

fix(types): prevent implicit 32-bit overflow panic and OOM DoS in checkUint64

- Enforce math.MaxInt bounds check in checkUint64 to prevent negative-size slice allocations and implicit integer conversions panicking on 32-bit architectures.
- Enforce math.MaxUint32 bounds check in checkUint64 to prevent slice allocation length out of range panics on 64-bit architectures.
- Implement incremental slice allocation via min(count, 1024) and append in readBool, readSizes, readFolder, and readUnpackInfo to mitigate memory exhaustion DoS from maliciously large metadata counts.
- Dynamic slice growth via append has negligible performance impact as 7z decompression CPU cycles completely dominate total execution time (99.9%+).

24 of 24 new or added lines in 1 file covered. (100.0%)

1857 of 2478 relevant lines covered (74.94%)

0.84 hits per line