[beta] Fix for CVE-2022-36113 and CVE-2022-36114#11088

Merged

bors merged 5 commits intorust-lang:rust-1.64.0from pietroalbini:pa-cves-beta

Sep 14, 2022

+214-13

Commits on Sep 14, 2022

CVE-2022-36113 : avoid unpacking .cargo-ok from the crate

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36113 : add tests

weihanglo
authored and
pietroalbini
committed
CVE-2022-36114 : limit the maximum unpacked size of a crate to 512MB

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36114 : add tests

weihanglo
authored and
pietroalbini
committed
fix formatting
pietroalbini
committed