Open
Description
Given a crafted input, lewton allocates over 1500 Mb of physical memory and spends ~6 seconds decoding a tiny 18kb file. This issue can be used to cause denial of service.
Steps to reproduce:
RUSTFLAGS='--cfg=fuzzing' cargo run --release --example perf /path/to/malformed/file.ogg
Testcase: https://github.com/RustAudio/lewton/files/2897332/issue_35_hang_new.ogg.gz
Found using AFL.rs, which categorized this issue as a hang.
This issue is distinct from #34 which is about allocating terabytes of virtual memory that is not actually filled.