<story><title>Zip Bomb</title><url>http://en.wikipedia.org/wiki/Zip_bomb</url></story><parent_chain></parent_chain><comment><author>jefffoster</author><text>I found a similar file to this (a zip file that contains itself) and e-mailed it to a friend at work.  He never received it, but I thought nothing of it (I assumed the email filters just destroyed it).&lt;p&gt;A days later the mail server stops working and the sysadmin turns up at my desk.  Turns out the anti-virus scanner had been unzipping and scanning repeatedly.  It eventually filled up the entire disk and bad things happened.</text></comment>
<story><title>Zip Bomb</title><url>http://en.wikipedia.org/wiki/Zip_bomb</url></story><parent_chain></parent_chain><comment><author>simoncoggins</author><text>I&apos;ve seen something similar with a PNG file for user supplied profile image [1]. The image was a 10000x10000 all black PNG image which compresses to a pretty small file size.&lt;p&gt;Unless you validate the image dimensions as well as the file size it may cause problems, for instance when GD is used to try to resize it exhausted the memory limit.&lt;p&gt;[1] &lt;a href=&quot;https://bugs.launchpad.net/mahara/+bug/784978&quot; rel=&quot;nofollow&quot;&gt;https://bugs.launchpad.net/mahara/+bug/784978&lt;/a&gt;</text></comment>