JDK-8314891 : Additional Zip64 extra header validation
  • Type: Bug
  • Component: core-libs
  • Sub-Component: java.util.jar
  • Priority: P4
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2023-08-23
  • Updated: 2023-11-13
  • Resolved: 2023-11-07
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 22
22 b23Fixed
Related Reports
Blocks :  
JDK-8303866 - Allow ZipInputStream.readEnd to parse small Zip64 ZIP files
Description
Add additional Zip64 extra header validation:

- Throw a ZipException If the extra len field is 0 and :
-- size, csize, or loc offset are set to 0xFFFFFFFF
-- disk starting number is set to 0xFFFF

- We have a valid size for the Zip64 extra header but we are missing the csize or loc fields if they are expected to be part of the header
Comments
Changeset: 82747132 Author: Lance Andersen <lancea@openjdk.org> Date: 2023-11-07 16:52:22 +0000 URL: https://git.openjdk.org/jdk/commit/82747132b07e288c1e6c2ba3392748c7718e994a
07-11-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/15650 Date: 2023-09-09 14:33:53 +0000
09-09-2023