[aur-general] AUR no more extracting source tarballs ( was: Upgraded AUR to 1.8.0)

[Isaac Dupree]

On 02/21/11 10:54, Lukas Fleischer wrote:
> Yes, like having two 1GB large files `tar -czf`'ed and uploading the
> resulting tarball to the AUR. I don't think that can be detected without
> being vulnerable to DoS attacks.

What if the PKGBUILD itself is a 1GB file?  For example a normal looking 
PKGBUILD followed by a billion newlines.  That probably compresses 
pretty well.

(/foolishly responding without reading code)

-Isaac