{"shas":[["eddc34bcfcce0f9ac461a81c36501600fe44d59e","3c363836cf4e16666669a25da280a1865c2d2874@falconindy.com","lib/dload: prevent large file attacks\n\nThis means creating a new struct which can pass more descriptive data\nfrom the back end sync functions to the downloader. In particular, we're\ninterested in the download size read from the sync DB. When the remote\nserver reports a size larger than this (via a content-length header),\nabort the transfer.\n\nIn cases where the size is unknown, we set a hard upper limit of:\n\n* 25MiB for a sync DB\n* 16KiB for a signature\n\nFor reference, 25MiB is more than twice the size of all of the current\nbinary repos (with files) combined, and 16KiB is a truly gargantuan\nsignature.\n\nSigned-off-by: Dave Reisner <dreisner@archlinux.org>","Dave Reisner"],["6d704d7262efeb78dc1c533cbcace2a3743dcca3","039ef2e3eb5f1b52facdf6248524cc5fe7bd1087@archlinux.org","absorb some _alpm_download params into payload struct\n\nRestore some sanity to the number of arguments passed to _alpm_download\nand curl_download_internal.\n\nSigned-off-by: Dave Reisner <dreisner@archlinux.org>","Dave Reisner"],["ae8d2f10a899b499ad3c3fb7f77ae022ed0366ef","039ef2e3eb5f1b52facdf6248524cc5fe7bd1087@archlinux.org","absorb fileinfo struct into dload_payload\n\nThis transitional struct becomes delicious noms for dload_payload.\n\nSigned-off-by: Dave Reisner <dreisner@archlinux.org>","Dave Reisner"]],"ref":"refs/heads/download","size":3,"head":"ae8d2f10a899b499ad3c3fb7f77ae022ed0366ef","push_id":35725033}