archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-27 14:54:52 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8272746: ZipFile can't open big file (NegativeArraySizeException)

Browse source 
Reviewed-by: lancea
This commit is contained in:
Masanori Yano 2022-01-18 18:20:57 +00:00 • committed by Lance Andersen
parent b734dc86ee
commit 848b16a3f9
2 changed files with 92 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/java.base/share/classes/java/util/zip/ZipFile.java
View file

@ -1497,6 +1497,9 @@ public class ZipFile implements ZipConstants, Closeable {
zerror("invalid END header (bad central directory offset)");
}
// read in the CEN and END
if (end.cenlen + ENDHDR >= Integer.MAX_VALUE) {
zerror("invalid END header (central directory size too large)");
}
cen = this.cen = new byte[(int)(end.cenlen + ENDHDR)];
if (readFullyAt(cen, 0, cen.length, cenpos) != end.cenlen + ENDHDR) {
zerror("read CEN tables failed");