fix(internal/utils): cap tar extraction size

Signed-off-by: Jason Dellaluce <[email protected]>
falcosecurity · Jun 12, 2023 · cc49e6c · cc49e6c
1 parent fa66777
commit cc49e6c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/utils/extract.go b/internal/utils/extract.go
@@ -61,7 +61,7 @@ func ExtractTarGz(gzipStream io.Reader, destDir string) ([]string, error) {
 			if err != nil {
 				return nil, err
 			}
-			if written, err := io.Copy(outFile, tarReader); err != nil {
+			if written, err := io.CopyN(outFile, tarReader, header.Size); err != nil {
 				return nil, err
 			} else if written != header.Size {
 				return nil, io.ErrShortWrite