[master] Fix for CVE-2022-36113 and CVE-2022-36114#11089

Merged

bors merged 5 commits intorust-lang:masterfrom

pietroalbini:pa-cves-nightly

Sep 14, 2022

Commits on Sep 14, 2022

CVE-2022-36113: avoid unpacking .cargo-ok from the crate

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36113: add tests

weihanglo
authored and
pietroalbini
committed
CVE-2022-36114: limit the maximum unpacked size of a crate to 512MB

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36114: add tests

weihanglo
authored and
pietroalbini
committed
fix formatting
pietroalbini
committed