GlitchTip gzip decompression PoC

This PoC demonstrates that compressed input can decompress above the chunk limit, showing the risk of decompressing before strict size enforcement.

Install

npm install

Steps to reproduce

npx ts-node .\glitchtip-gzip-decompression-poc.ts --chunk-limit-bytes 33554432 --extra-bytes 1024

1. Run the PoC with a chosen chunk limit.
2. The script builds a payload that expands just above that limit.
3. It prints compressed and decompressed sizes.

Expected vulnerable behavior

The script shows:

• compressed size is small
• decompressed size exceeds the configured chunk limit

This reproduces the memory-allocation-before-rejection pattern.