codechecker 6.29.2__tar.gz → 6.29.3__tar.gz

{codechecker-6.29.2 → codechecker-6.29.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codechecker
-Version: 6.29.2
+Version: 6.29.3
 Summary: CodeChecker is an analyzer tooling, defect database and viewer extension
 Home-page: https://github.com/Ericsson/CodeChecker
 Author: CodeChecker Team (Ericsson)
@@ -23,26 +23,26 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE.TXT
-Requires-Dist: psutil~=7.0
-Requires-Dist: PyYAML~=6.0
-Requires-Dist: types-psutil~=7.0
-Requires-Dist: prettytable~=3.0
-Requires-Dist: multiprocess~=0.70
-Requires-Dist: sarif-tools~=3.0
-Requires-Dist: Authlib~=1.6
-Requires-Dist: types-lxml~=2026.2.0
 Requires-Dist: gitpython~=3.0
-Requires-Dist: setuptools~=80.0
-Requires-Dist: semver~=3.0
-Requires-Dist: requests~=2.0
 Requires-Dist: types-setuptools~=80.0
-Requires-Dist: portalocker~=3.0
+Requires-Dist: semver~=3.0
+Requires-Dist: setuptools~=80.0
 Requires-Dist: argcomplete~=3.0
+Requires-Dist: sarif-tools~=3.0
+Requires-Dist: prettytable~=3.0
+Requires-Dist: lxml~=6.0
+Requires-Dist: types-lxml~=2026.2.0
 Requires-Dist: types-PyYAML~=6.0
+Requires-Dist: types-psutil~=7.0
+Requires-Dist: PyYAML~=6.0
 Requires-Dist: thrift~=0.22
+Requires-Dist: multiprocess~=0.70
 Requires-Dist: alembic~=1.5
-Requires-Dist: lxml~=6.0
+Requires-Dist: requests~=2.0
+Requires-Dist: portalocker~=3.0
+Requires-Dist: psutil~=7.0
 Requires-Dist: sqlalchemy~=2.0.0
+Requires-Dist: Authlib~=1.6
 Dynamic: author
 Dynamic: author-email
 Dynamic: classifier

codechecker-6.29.3/build_dist/CodeChecker/config/analyzer_version.json

@@ -0,0 +1,14 @@
+{
+    "git_describe": {
+        "dirty": "6.29.3",
+        "tag": "6.29.3"
+    },
+    "git_hash": "6b68dd8fe6d5c8d66c7df0649aae1abc11d88dfe",
+    "package_build_date": "2026-11-05T20:46",
+    "version": {
+        "major": "6",
+        "minor": "29",
+        "rc": "",
+        "revision": "3"
+    }
+}

codechecker-6.29.3/build_dist/CodeChecker/config/web_version.json

@@ -0,0 +1,14 @@
+{
+    "git_describe": {
+        "dirty": "6.29.3",
+        "tag": "6.29.3"
+    },
+    "git_hash": "6b68dd8fe6d5c8d66c7df0649aae1abc11d88dfe",
+    "package_build_date": "2026-11-05T20:46",
+    "version": {
+        "major": "6",
+        "minor": "29",
+        "rc": "",
+        "revision": "3"
+    }
+}

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codechecker
-Version: 6.29.2
+Version: 6.29.3
 Summary: CodeChecker is an analyzer tooling, defect database and viewer extension
 Home-page: https://github.com/Ericsson/CodeChecker
 Author: CodeChecker Team (Ericsson)
@@ -23,26 +23,26 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE.TXT
-Requires-Dist: psutil~=7.0
-Requires-Dist: PyYAML~=6.0
-Requires-Dist: types-psutil~=7.0
-Requires-Dist: prettytable~=3.0
-Requires-Dist: multiprocess~=0.70
-Requires-Dist: sarif-tools~=3.0
-Requires-Dist: Authlib~=1.6
-Requires-Dist: types-lxml~=2026.2.0
 Requires-Dist: gitpython~=3.0
-Requires-Dist: setuptools~=80.0
-Requires-Dist: semver~=3.0
-Requires-Dist: requests~=2.0
 Requires-Dist: types-setuptools~=80.0
-Requires-Dist: portalocker~=3.0
+Requires-Dist: semver~=3.0
+Requires-Dist: setuptools~=80.0
 Requires-Dist: argcomplete~=3.0
+Requires-Dist: sarif-tools~=3.0
+Requires-Dist: prettytable~=3.0
+Requires-Dist: lxml~=6.0
+Requires-Dist: types-lxml~=2026.2.0
 Requires-Dist: types-PyYAML~=6.0
+Requires-Dist: types-psutil~=7.0
+Requires-Dist: PyYAML~=6.0
 Requires-Dist: thrift~=0.22
+Requires-Dist: multiprocess~=0.70
 Requires-Dist: alembic~=1.5
-Requires-Dist: lxml~=6.0
+Requires-Dist: requests~=2.0
+Requires-Dist: portalocker~=3.0
+Requires-Dist: psutil~=7.0
 Requires-Dist: sqlalchemy~=2.0.0
+Requires-Dist: Authlib~=1.6
 Dynamic: author
 Dynamic: author-email
 Dynamic: classifier

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker.egg-info/SOURCES.txt

@@ -308,6 +308,7 @@ build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/ht
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/browsersupport.js
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/buglist.js
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/bugviewer.js
+build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/statistics.js
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/vendor/codemirror/clike.min.js
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/vendor/codemirror/codemirror.LICENSE
 build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/vendor/codemirror/codemirror.min.css

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_client/cli/store.py

@@ -723,6 +723,8 @@ def should_be_zipped(input_file: str, input_files: Iterable[str]) -> bool:
 
 
 def get_analysis_statistics(inputs, limits):
+    # This function handles failure ZIP limits incorrectly.
+    # Namely, there is no size limit for "should_be_zipped" files.
     """
     Collects analysis statistics information and returns them.
 

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/html.py

@@ -7,7 +7,6 @@
 # -------------------------------------------------------------------------
 
 import html
-import io
 import json
 import logging
 import os
@@ -17,6 +16,7 @@ import sys
 from collections import defaultdict
 from string import Template
 from typing import Callable, Dict, List, Optional, Set, Tuple
+from urllib.parse import quote
 
 from codechecker_report_converter.report import BugPathEvent, \
     InvalidFileContentMsg, File, MacroExpansion, Report, report_file, \
@@ -138,7 +138,8 @@ class HtmlBuilder:
             'clike_js': os.path.join(codemirror_dir, 'clike.min.js'),
             'bug_viewer': os.path.join(js_dir, 'bugviewer.js'),
             'bug_list': os.path.join(js_dir, 'buglist.js'),
-            'browser_support': os.path.join(js_dir, 'browsersupport.js')
+            'browser_support': os.path.join(js_dir, 'browsersupport.js'),
+            'statistics': os.path.join(js_dir, 'statistics.js')
         }
 
         # Get the HTML layout file content.
@@ -176,7 +177,7 @@ class HtmlBuilder:
 
         self.files[file.id] = {
             'id': file.id, 'filePath': file.path,
-            'content': html.escape(file_content)
+            'content': file_content
         }
 
         return self.files[file.id]
@@ -186,10 +187,40 @@ class HtmlBuilder:
         if self._checker_labels:
             doc_urls = self._checker_labels.label_of_checker(
                 report.checker_name, 'doc_url', report.analyzer_name)
-            return doc_urls[0] if doc_urls else None
+            doc_url = doc_urls[0] if doc_urls else ''
+            valid_url = doc_url.startswith('http://') or \
+                doc_url.startswith('https://')
+            return doc_url if valid_url else None
 
         return None
 
+    @staticmethod
+    def _html_escape_strings(obj):
+        """Recursively HTML-escape all strings in a nested data structure."""
+
+        if isinstance(obj, str):
+            return html.escape(obj)
+
+        elif isinstance(obj, dict):
+            return {
+                HtmlBuilder._html_escape_strings(key):
+                    HtmlBuilder._html_escape_strings(value)
+                for key, value in obj.items()
+            }
+
+        elif isinstance(obj, list):
+            return [HtmlBuilder._html_escape_strings(item) for item in obj]
+
+        elif isinstance(obj, tuple):
+            return tuple(
+                HtmlBuilder._html_escape_strings(item) for item in obj)
+
+        elif isinstance(obj, set):
+            return {HtmlBuilder._html_escape_strings(item) for item in obj}
+
+        else:
+            return obj
+
     def _get_html_reports(
         self,
         reports: List[Report]
@@ -287,10 +318,10 @@ class HtmlBuilder:
 
         substitute_data = self._tag_contents
         substitute_data.update({
-            'report_data': json.dumps({
+            'report_data': json.dumps(HtmlBuilder._html_escape_strings({
                 'files': files,
                 'reports': html_reports
-            })
+            }))
         })
 
         content = self._layout.substitute(substitute_data)
@@ -314,7 +345,7 @@ class HtmlBuilder:
                 html_report_links.append({'link': html_file, 'report': report})
 
         table_reports = map(lambda data: {
-            'link': os.path.basename(data['link']),
+            'link': quote(os.path.basename(data['link'])),
             'file-path': data['report']['path'],
             'report-hash': data['report']['reportHash'],
             'checker-name': data['report']['checker']['name'],
@@ -329,7 +360,8 @@ class HtmlBuilder:
             'chronological-order': data['report']['chronologicalOrder']
         }, html_report_links)
 
-        self._tag_contents['table_reports'] = json.dumps(list(table_reports))
+        self._tag_contents['table_reports'] = json.dumps(
+            HtmlBuilder._html_escape_strings(list(table_reports)))
 
         content = self._index.substitute(self._tag_contents)
         output_path = os.path.join(output_dir, 'index.html')
@@ -359,54 +391,36 @@ class HtmlBuilder:
             num_of_reports += len(reports)
 
         checker_statistics: Dict[str, int] = defaultdict(int)
+        severity_statistics: Dict[str, int] = defaultdict(int)
         for reports in self.generated_html_reports.values():
             for report in reports:
                 checker = report['checker']['name']
                 checker_statistics[checker] += 1
+                severity_statistics[self.get_severity(checker)] += 1
+
+        checker_statistics_data: list[dict] = []
+        for checker_name in sorted(checker_statistics):
+            checker_statistics_data.append({
+                'checker_name': checker_name,
+                'severity': self.get_severity(checker_name).lower(),
+                'value': checker_statistics[checker_name]
+            })
 
-        checker_rows: List[List[str]] = []
-        severity_statistics: Dict[str, int] = defaultdict(int)
-
-        with io.StringIO() as string:
-            for checker_name in sorted(checker_statistics):
-                severity = self.get_severity(checker_name)
-                string.write(f'''
-    <tr>
-    <td>{checker_name}</td>
-    <td class="severity" severity="{severity.lower()}">
-        <i class="severity-{severity.lower()}" title="{severity.lower()}"></i>
-    </td>
-    <td>{checker_statistics[checker_name]}</td>
-    </tr>
-''')
-                checker_rows.append([checker_name, severity,
-                                    str(checker_statistics[checker_name])])
-                severity_statistics[severity] += \
-                    checker_statistics[checker_name]
-            checker_statistics_content = string.getvalue()
-
-        severity_rows: List[List[str]] = []
-
-        with io.StringIO() as string:
-            for severity in sorted(severity_statistics, key=severity_order):
-                num = severity_statistics[severity]
-                string.write(f'''
-    <tr>
-    <td class="severity" severity="{severity.lower()}">
-        <i class="severity-{severity.lower()}" title="{severity.lower()}"></i>
-    </td>
-    <td>{num}</td>
-    </tr>
-''')
-                severity_rows.append([severity, str(num)])
-            severity_statistics_content = string.getvalue()
+        severity_statistics_data: list[dict] = []
+        for severity in sorted(severity_statistics, key=severity_order):
+            severity_statistics_data.append({
+                'severity': severity.lower(),
+                'value': severity_statistics[severity]
+            })
 
         substitute_data = self._tag_contents
         substitute_data.update({
             'num_of_analyzer_result_files': str(num_of_analyzer_result_files),
             'number_of_reports': str(num_of_reports),
-            'checker_statistics': checker_statistics_content,
-            'severity_statistics': severity_statistics_content})
+            'checker_statistics_data': json.dumps(
+                HtmlBuilder._html_escape_strings(checker_statistics_data)),
+            'severity_statistics_data': json.dumps(
+                HtmlBuilder._html_escape_strings(severity_statistics_data))})
 
         content = self._statistics.substitute(substitute_data)
 

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/buglist.js

@@ -108,15 +108,13 @@ var BugList = {
     let row = document.createElement('tr');
 
     let id_col = document.createElement('td');
-    id_col.appendChild(document.createTextNode(id));
+    id_col.innerHTML = id;
     row.appendChild(id_col);
 
     let file_col = document.createElement('td');
-    let file_col_a = document.createElement('a');
-    file_col_a.setAttribute(
-      'href', data.link + '#reportHash=' + data['report-hash']);
-    file_col_a.innerHTML = data['file-path'] + ' @ Line ' + data.line;
-    file_col.appendChild(file_col_a);
+    file_col.innerHTML = '<a href="' + data.link + '#reportHash=' +
+      data['report-hash'] + '">' + data['file-path'] + ' @ Line&nbsp;' +
+      data.line + '</a>';
     row.appendChild(file_col);
 
     let severity_col = document.createElement('td');
@@ -129,44 +127,37 @@ var BugList = {
     row.appendChild(severity_col);
 
     let checker_col = document.createElement('td');
-    let checker_col_a = document.createElement('a');
-    checker_col_a.setAttribute('href', data['checker-url']);
-    checker_col_a.setAttribute('target', '_blank');
-    checker_col_a.appendChild(
-      document.createTextNode(data['checker-name']));
-    checker_col.appendChild(checker_col_a);
+    checker_col.innerHTML = '<a href="' + data['checker-url'] +
+      '" target="_blank">' + data['checker-name'] + '</a>';
     row.appendChild(checker_col);
 
     let message_col = document.createElement('td');
-    message_col.appendChild(document.createTextNode(data.message));
+    message_col.innerHTML = data.message;
     row.appendChild(message_col);
 
     let length_col = document.createElement('td');
     length_col.setAttribute('class', 'bug-path-length');
-    length_col.appendChild(document.createTextNode(data['bug-path-length']));
+    length_col.innerHTML = data['bug-path-length'];
     row.appendChild(length_col);
 
     let review_col = document.createElement('td');
-    review_col.appendChild(document.createTextNode(data['review-status']));
+    review_col.innerHTML = data['review-status'];
     row.appendChild(review_col);
 
     let testcase_col = document.createElement('td');
     testcase_col.setAttribute('class', 'dynamic');
-    testcase_col.appendChild(
-      document.createTextNode(data['testcase'] || ''));
+    testcase_col.innerHTML = data['testcase'] || '';
     row.appendChild(testcase_col);
 
     let timestamp_col = document.createElement('td');
     timestamp_col.setAttribute('class', 'dynamic');
-    timestamp_col.appendChild(
-      document.createTextNode(data['timestamp'] || ''));
+    timestamp_col.innerHTML = data['timestamp'] || '';
     row.appendChild(timestamp_col);
 
     let chronological_col = document.createElement('td');
     chronological_col.setAttribute('class', 'dynamic');
-    chronological_col.appendChild(
-      document.createTextNode(data['chronological-order'] || ''));
-      row.appendChild(chronological_col);
+    chronological_col.innerHTML = data['chronological-order'] || '';
+    row.appendChild(chronological_col);
 
     return row;
   },

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/bugviewer.js

@@ -16,34 +16,6 @@ var BugViewer = {
   init : function (files, reports) {
     this._files = files;
     this._reports = reports;
-
-    this.initEscapeChars();
-  },
-
-  initEscapeChars : function () {
-    this.escapeChars = {
-      ' ' : 'nbsp',
-      '<' : 'lt',
-      '>' : 'gt',
-      '"' : 'quot',
-      '&' : 'amp'
-    };
-
-    var regexString = '[';
-    for (var key in this.escapeChars) {
-      regexString += key;
-    }
-    regexString += ']';
-
-    this.escapeRegExp = new RegExp( regexString, 'g');
-  },
-
-  escapeHTML : function (str) {
-    var that = this;
-
-    return str.replace(this.escapeRegExp, function (m) {
-      return '&' + that.escapeChars[m] + ';';
-    });
   },
 
   initByUrl : function () {
@@ -111,15 +83,15 @@ var BugViewer = {
     var nav = document.getElementById('report-nav');
     var list = document.createElement('ul');
     this._reports.forEach(function (report) {
-      var events = report.events;
-      var lastBugEvent = events[events.length - 1];
       var item = document.createElement('li');
 
       var severity = document.createElement('i');
       severity.className = 'severity-' + report.severity.toLowerCase();
-
       item.appendChild(severity);
-      item.appendChild(document.createTextNode(report.message));
+
+      var message = document.createElement('span');
+      message.innerHTML = report.message;
+      item.appendChild(message);
 
       item.addEventListener('click', function () {
         that.navigate(report, item);
@@ -222,10 +194,10 @@ var BugViewer = {
       var name = 'macro expansion' + (event.name ? ': ' + event.name : '');
 
       return '<span class="tag macro">' + name + '</span>'
-        + this.escapeHTML(event.message).replace(/(?:\r\n|\r|\n)/g, '<br>');
+        + event.message.replace(/(?:\r\n|\r|\n)/g, '<br>');
     } else if (kind === 'note') {
       return '<span class="tag note">note</span>'
-        +  this.escapeHTML(event.message).replace(/(?:\r\n|\r|\n)/g, '<br>');
+        + event.message.replace(/(?:\r\n|\r|\n)/g, '<br>');
     }
   },
 
@@ -317,8 +289,7 @@ var BugViewer = {
       }
 
       var msg = document.createElement('span');
-      msg.innerHTML = that.escapeHTML(event.message)
-        .replace(/(?:\r\n|\r|\n)/g, '<br>');
+      msg.innerHTML = event.message.replace(/(?:\r\n|\r|\n)/g, '<br>');
 
       element.appendChild(msg);
 
@@ -350,7 +321,7 @@ var BugViewer = {
       error_tag.innerHTML = "E";
       element.appendChild(error_tag);
       var msg = document.createElement('span');
-      msg.innerHTML = that.escapeHTML(this._currentReport.message)
+      msg.innerHTML = this._currentReport.message
         .replace(/(?:\r\n|\r|\n)/g, '<br>');
       element.appendChild(msg);
       that._lineWidgets.push(that._codeMirror.addLineWidget(

codechecker-6.29.3/build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/js/statistics.js

@@ -0,0 +1,58 @@
+// -------------------------------------------------------------------------
+//  Part of the CodeChecker project, under the Apache License v2.0 with
+//  LLVM Exceptions. See LICENSE for license information.
+//  SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+// -------------------------------------------------------------------------
+
+var Statistics = {
+
+  init : function () {
+    var checker_statistics = document.getElementById('checker-statistics');
+
+    for (var checker_data of checker_statistics_data) {
+      var row = document.createElement('tr');
+
+      var checker_name = document.createElement('td');
+      checker_name.innerHTML = checker_data['checker_name'];
+      row.appendChild(checker_name);
+
+      var severity = document.createElement('td');
+      severity.setAttribute('class', 'severity');
+      severity.setAttribute('severity', checker_data['severity']);
+      var severity_i = document.createElement('i');
+      severity_i.setAttribute('class', 'severity-' + checker_data['severity']);
+      severity_i.setAttribute('title', checker_data['severity']);
+      severity.appendChild(severity_i);
+      row.appendChild(severity);
+
+      var value = document.createElement('td');
+      value.innerHTML = checker_data['value'];
+      row.appendChild(value);
+
+      checker_statistics.appendChild(row);
+    }
+
+    var severity_statistics = document.getElementById('severity-statistics');
+
+    for (var severity_data of severity_statistics_data) {
+      var row = document.createElement('tr');
+
+      var severity = document.createElement('td');
+      severity.setAttribute('class', 'severity');
+      severity.setAttribute('severity', severity_data['severity']);
+      var severity_i = document.createElement('i');
+      severity_i.setAttribute(
+        'class', 'severity-' + severity_data['severity']);
+      severity_i.setAttribute('title', severity_data['severity']);
+      severity.appendChild(severity_i);
+      row.appendChild(severity);
+
+      var value = document.createElement('td');
+      value.innerHTML = severity_data['value'];
+      row.appendChild(value);
+
+      severity_statistics.appendChild(row);
+    }
+  }
+
+};

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_report_converter/report/output/html/static/statistics.html

@@ -14,10 +14,16 @@
 
     <script>
       ${browser_support}
+      ${statistics}
+
+      var checker_statistics_data = ${checker_statistics_data};
+      var severity_statistics_data = ${severity_statistics_data};
 
       window.onload = function () {
         if (!browserCompatible) {
           setNonCompatibleBrowserMessage();
+        } else {
+          Statistics.init();
         }
       }
     </script>
@@ -44,7 +50,6 @@
           <th>Severity</th>
           <th>Number of reports</th>
         </tr>
-        ${checker_statistics}
       </table>
       <h1>Severity statistics</h1>
       <table id="severity-statistics">
@@ -52,7 +57,6 @@
           <th>Severity</th>
           <th>Number of reports</th>
         </tr>
-        ${severity_statistics}
       </table>
     </div>
   </body>

{codechecker-6.29.2 → codechecker-6.29.3}/build_dist/CodeChecker/lib/python3/codechecker_server/api/report_server.py

@@ -4531,6 +4531,23 @@ class ThriftRequestHandler:
     def storeAnalysisStatistics(self, run_name, b64zip):
         self.__require_store()
 
+        # By the client, the failure files are zipped
+        # (without any ZIP compression!), then compressed by Python's
+        # zlib library, and finally converted to a base64 string
+        # (this is the input parameter b64zip).
+        #
+        # Due to a flawed implementation, the client does not check sizes for
+        # some of the files, therefore, the ZIP's max size can be larger than:
+        # StoreLimitKind.FAILURE_ZIP_SIZE +
+        # StoreLimitKind.COMPILATION_DATABASE_SIZE.
+        # We add additional 10M for these unchecked files.
+        # In the end, the uploaded data size should be smaller
+        # since it is ZLIB compressed.
+        max_file_size = \
+            (self._manager.get_failure_zip_size() or 0) + \
+            (self._manager.get_compilation_database_size() or 0) + \
+            10 * 1024 * 1024  # 10 MiB
+
         report_dir_store = self._manager.get_analysis_statistics_dir()
         if report_dir_store:
             try:
@@ -4542,15 +4559,22 @@ class ThriftRequestHandler:
 
                 # Removes and replaces special characters in the run name.
                 run_name = slugify(run_name)
-                run_zip_file = os.path.join(product_dir, run_name + '.zip')
-                with open(run_zip_file, 'wb') as run_zip:
-                    run_zip.write(zlib.decompress(
-                        base64.b64decode(b64zip.encode('utf-8'))))
-
-                # Change permission, so only current user and group have access
-                # to this file.
-                os.chmod(
-                    run_zip_file, stat.S_IRUSR | stat.S_IWUSR | stat.S_IRGRP)
+                out_file = os.path.join(product_dir,
+                                        run_name + '.zip.zlib')
+                uploaded_zlib_data: bytes = base64.b64decode(b64zip)
+                if len(uploaded_zlib_data) > max_file_size:
+                    LOG.warning("Failed to process storeAnalysisStatistics, "
+                                "upload size limit was reached "
+                                "(product: %s, run: %s)!",
+                                self._product.endpoint, run_name)
+                    return False
+
+                with open(out_file, 'wb') as f:
+                    f.write(uploaded_zlib_data)
+
+                # Change permission, so only current user and group have
+                # access to this file.
+                os.chmod(out_file, stat.S_IRUSR | stat.S_IWUSR | stat.S_IRGRP)
 
                 return True
             except Exception as ex: