The zlib module for compression. decompress() on untrusted input can consume unbounded memory (zip bomb / decompression amplification). Set max_length to cap output.
.decompress().decompress()Sinkzlib.decompress(data: bytes, wbits=MAX_WBITS, bufsize=DEF_BUF_SIZE) -> bytes
Decompresses zlib / deflate data. Decompression-bomb sink on untrusted input without length cap.
0.decompressobj()Neutralzlib.decompressobj(wbits=MAX_WBITS, zdict=b'') -> Decompress
Returns a streaming decompressor. Use with .decompress(data, max_length) to cap output.
| FQN | Field | |
|---|---|---|
| zlib | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyZlib