mirror of
https://github.com/rclone/rclone.git
synced 2026-10-11 15:32:03 -04:00
With -l/--links a .rclonelink object is buffered in memory to become the target of a symlink. The read was unbounded, so a hostile or corrupt source serving a large .rclonelink object made rclone use that much memory and then log the whole body in the resulting error. A symlink target can never be longer than a path, so the read now stops at 128 KiB and anything longer is refused without retrying.