alt Hacker NewsZip and PNG bombs have been around for a while: https://github.com/0x48piraj/gz-bomb https://libpng.sourceforge.io/decompression_bombs.html
Replies
est • today at 4:51 AM
I mean "mild" bombs where the final output bytes looks normal, a regular sized image, but the decompressing steps takes unnecessarily long, eating CPU or/and RAM
You can also have a zip that decompresses to itself: https://research.swtch.com/zip