Skip to content

http: cap maximum decompression size - #5287

Merged
gpotter2 merged 2 commits into
secdev:masterfrom
gpotter2:http-cap
Nov 12, 2026
Merged

gpotter2 merged 2 commits into
secdev:masterfrom
gpotter2:http-cap

Conversation

@gpotter2

Copy link
Copy Markdown
Member
  • cap the decompression size in HTTP layer
  • drop brotli / zstd tests (the latter is basically unused IRL)

@codecov

codecov Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 40.62500% with 19 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.57%. Comparing base (7a9fde6) to head (37fa611).
⚠️ Report is 1 commits behind head on master.

Files with missing lines Patch % Lines
scapy/layers/http.py 36.66% 19 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master    #5287      +/-   ##
==========================================
+ Coverage   80.08%   80.57%   +0.49%     
==========================================
  Files         375      375              
  Lines       98722    98740      +18     
==========================================
+ Hits        79062    79564     +502     
+ Misses      19660    19176     -484     
Files with missing lines Coverage Δ
scapy/layers/tls/crypto/compression.py 90.90% <100.00%> (+0.21%) ⬆️
scapy/layers/http.py 81.84% <36.66%> (-1.98%) ⬇️

... and 20 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@gpotter2
gpotter2 merged commit c17ec86 into secdev:master Nov 12, 2026
22 of 23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant