Details
-
Bug
-
Resolution: Fixed
-
P2: Important
-
6.0.0, 6.0.1, 6.1.0 Alpha
-
None
-
Fedora 33
-
Linux/X11
Description
I recently started testing my application (remote GUI for transmission-daemon) with Qt 6 and immediately faced this issue: some HTTP requests to transmission-daemon fail with ProtocolFailure without any network or HTTP errors.
After some debugging I found out that the reason is QDecompressHelper::isPotentialArchiveBomb(), which checks that gzip compression ratio is > 40 (in this case it is 65.536) and request fails. I attached tcp dump as captured by Wireshark (failed request is the last one).
It seems that the only way to opt out from this behaviour is by using an internal attribute which obviously is not a solution.
Attachments
Issue Links
- resulted in
-
QTBUG-91870 QDecompressHelper's archive bomb minimum limit should be adjustable
-
- Closed
-
| For Gerrit Dashboard: QTBUG-91392 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 337354,7 | Make qdecompresshelper archive bomb check only trigger for large files | dev | qt/qtbase | Status: MERGED | +2 | 0 |
| 337820,2 | Make qdecompresshelper archive bomb check only trigger for large files | 6.0 | qt/qtbase | Status: MERGED | +2 | 0 |
| 337821,2 | Make qdecompresshelper archive bomb check only trigger for large files | 6.1 | qt/qtbase | Status: MERGED | +2 | 0 |