Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Poco::Zip library should check consistency of archives before extracting #4623

Open
obiltschnig opened this issue Jul 31, 2024 · 2 comments · May be fixed by #4807
Open

Poco::Zip library should check consistency of archives before extracting #4623

obiltschnig opened this issue Jul 31, 2024 · 2 comments · May be fixed by #4807
Assignees
@obiltschnig
Labels
bug security
Milestone
Release 1.15.0

Comments

@obiltschnig
Copy link
Member

Specifically, file sizes and CRCs in the central directory should be checked for consistency with entries in the file headers, and inconsistent archives shall not be processed.
@obiltschnig obiltschnig added this to the Release 1.14.0 milestone Jul 31, 2024
@aleks-f aleks-f added this to 1.14 Oct 31, 2024
@matejk matejk modified the milestones: Release 1.14.0, Release 1.15.0 Nov 25, 2024
@matejk matejk removed this from 1.14 Nov 25, 2024
@nyashbox
Copy link
Contributor

nyashbox commented Dec 2, 2024

Is anyone working on this issue? I would like to give it a try

@obiltschnig
Copy link
Member Author

Sure, please give it a go.

@nyashbox nyashbox linked a pull request Dec 3, 2024 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@obiltschnig obiltschnig

Labels
bug security
Projects
None yet
Milestone
Release 1.15.0
Development

Successfully merging a pull request may close this issue.

Poco::Zip - Check archive consistency before extracting nyashbox/poco
3 participants
@obiltschnig @matejk @nyashbox