## https://sploitus.com/exploit?id=286D2CC4-269B-5444-BDAC-8DABC9357653
# GlitchTip gzip decompression PoC
This PoC demonstrates that compressed input can decompress above the chunk limit, showing the risk of decompressing before strict size enforcement.
## Install
```sh
npm install
```
## Steps to reproduce
```sh
npx ts-node .\glitchtip-gzip-decompression-poc.ts --chunk-limit-bytes 33554432 --extra-bytes 1024
```
1. Run the PoC with a chosen chunk limit.
2. The script builds a payload that expands just above that limit.
3. It prints compressed and decompressed sizes.
## Expected vulnerable behavior
The script shows:
- compressed size is small
- decompressed size exceeds the configured chunk limit
This reproduces the memory-allocation-before-rejection pattern.