Arduino Forum

General Category => General Discussion => Topic started by: BerninFL on Jul 31, 2020, 02:13 pm

Title: Avast versus ESP32 DevKit
Post by: BerninFL on Jul 31, 2020, 02:13 pm
FYI,

Avast detected a decompression bomb in the ESP32 DevKit from https://www.espressif.com/

esp32-devkitc-v4_reference_design.zip|>ESP32-DevKitC-V4_Reference_Design\01_Schematic\ESP32-DevKitC-V4_20180607A.DSN Error 42110 {The file is a decompression bomb.}

ESP32-DevKitS_V1.1_Reference_Design.zip|>ESP32-DevKitS(-R)_V1.1_Reference_Design\01_Schematic\ESP32_DevKitS_20190621.DSN Error 42110 {The file is a decompression bomb.}

Title: Re: Avast versus ESP32 DevKit
Post by: Robin2 on Jul 31, 2020, 05:43 pm
Avast detected a decompression bomb in the ESP32 DevKit from https://www.espressif.com/

First, what is a decompression bomb?

Second, an ESP32 is not an Arduino.

Third, it sounds like the problem is in the code that would run on the PC and not something that would be in the code on the actual ESP32.


This Thread is about the possibility of a virus being created which runs on an Arduino board and which can propagate itself between Arduino boards.

...R
Title: Re: Avast versus ESP32 DevKit
Post by: Coding Badly on Jul 31, 2020, 11:16 pm
First, what is a decompression bomb?
Compressed file that has unbounded decompression.  The goal is to fill your storage device with garbage.  For a modern operating system it's essentially an annoying childish prank.

I do wonder if one could be designed to damage an SSD.

(thread split)
Title: Re: Avast versus ESP32 DevKit
Post by: ballscrewbob on Aug 02, 2020, 05:12 am
It sounds like a download package from somewhere NOT associated to Arduino.
ERGO somebody else problem that should be reported to the other source or site etc.