[GH] (commons-compress/COMPRESS-726-bomb-guard): Workflow run "CodeQL" failed!

[GitBox <gi...@apache.org>]

The GitHub Actions job "CodeQL" on commons-compress.git/COMPRESS-726-bomb-guard has failed.
Run started by GitHub user tomasilluminati (triggered by tomasilluminati).

Head commit for run:
bac8b3018fe620f8ed483250a312a75c9395ac9c / Tomas Illuminati Balbin <to...@owasp.org>
[COMPRESS-726] Add decompressed size limit to CompressorStreamFactory

CompressorStreamFactory gets a Builder with setMaxDecompressedSize(long),
setMemoryLimitKiB(int) and setDecompressUntilEOF(boolean). With a limit
set, the factory wraps each stream in a package-private
BoundedCompressorInputStream built on Commons IO BoundedInputStream: at
most that many bytes are returned, an exact-size stream ends normally,
and more output throws CompressorException. The count is taken on the
returned bytes, so declared sizes play no part and every format behaves
the same, Pack200 included.

CompressorInputStream now implements InputStreamStatistics. The base
getCompressedCount() returns -1 and keeps the throws clause of the
interface, so subclasses that declare it still compile.

Off by default. No ratio guard and no new exception type, as agreed on
the pull request.

Report URL: https://github.com/apache/commons-compress/actions/runs/35556616483

With regards,
GitHub Actions via GitBox