[beta] Fix for CVE-2022-36113 and CVE-2022-36114#11088

Merged

bors merged 5 commits intorust-lang:rust-1.64.0from

pietroalbini:pa-cves-beta

Sep 14, 2022

Commits on Sep 14, 2022

CVE-2022-36113: avoid unpacking .cargo-ok from the crate

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36113: add tests

weihanglo
authored and
pietroalbini
committed
CVE-2022-36114: limit the maximum unpacked size of a crate to 512MB

joshtriplett
authored and
pietroalbini
committed
CVE-2022-36114: add tests

weihanglo
authored and
pietroalbini
committed
fix formatting
pietroalbini
committed