Uploaded image for project: 'Commons Compress'
  1. Commons Compress
  2. COMPRESS-101

ZipArchiveInputStream doesn't handle data descriptors without signatures

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0
    • Fix Version/s: 1.1
    • Component/s: None
    • Labels:
      None

      Description

      from http://www.pkware.com/documents/casestudies/APPNOTE.TXT :

      Although not originally assigned a signature, the value
      0x08074b50 has commonly been adopted as a signature value
      for the data descriptor record. Implementers should be
      aware that ZIP files may be encountered with or without this
      signature marking data descriptors and should account for
      either case when reading ZIP files to ensure compatibility.
      When writing ZIP files, it is recommended to include the
      signature value marking the data descriptor record. When
      the signature is used, the fields currently defined for
      the data descriptor record will immediately follow the
      signature.

      The current code skips over 16 bytes while the descriptor may be using only 12 bytes.

        Attachments

          Activity

            People

            • Assignee:
              bodewig Stefan Bodewig
              Reporter:
              bodewig Stefan Bodewig
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: