Make sure an extension block is large enough.

gdraheim / zziplib

The ZZIPlib provides read access on ZIP-archives and unpacked data. It features an additional simplified API following the standard Posix API for file access

Other

62 stars 50 forks source link

Make sure an extension block is large enough. #19

Closed jmoellers closed 6 years ago

jmoellers commented 6 years ago

If an extension block is too small to hold an extension, do not use the information therein.
If the End of central directory record (EOCD) contains an Offset of start of central directory which is beyond the end of the file, reject the file. [CVE-2018-6540]

gdraheim commented 6 years ago

related to #15