You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by ji...@apache.org on 2026/10/13 15:22:03 UTC
(openoffice) 02/14: More checks
This is an automated email from the ASF dual-hosted git repository.
jimjag pushed a commit to branch AOO50X
in repository https://gitbox.apache.org/repos/asf/openoffice.git
commit 5ac6444975cad3b1fed3c34a592131d806712195
Author: Arrigo Marchiori <ar...@yahoo.it>
AuthorDate: Tue Sep 15 21:40:39 2026 +0200
More checks
(cherry picked from commit 66ab9c1188ef75c84225c856a87bc93d575247ca)
---
main/package/source/package/zipapi/ZipFile.cxx | 2 ++
1 file changed, 2 insertions(+)
diff --git a/main/package/source/package/zipapi/ZipFile.cxx b/main/package/source/package/zipapi/ZipFile.cxx
index 32b6e4fffe..921d144bc3 100644
--- a/main/package/source/package/zipapi/ZipFile.cxx
+++ b/main/package/source/package/zipapi/ZipFile.cxx
@@ -655,6 +655,8 @@ static void readExtraFields( MemoryByteGrabber &rMemGrabber, sal_Int16 nLength,
throw ZipException( OUString( RTL_CONSTASCII_USTRINGPARAM ( "Invalid ZIP extra fields" ) ), uno::Reference < XInterface > () );
switch ( nHeaderID ) {
case 0x7075: // Info-ZIP Unicode Path Extra Field
+ if ( nDataSize < 5 )
+ throw ZipException( OUString( RTL_CONSTASCII_USTRINGPARAM ( "Invalid size for ZIP unicode path extra field" ) ), uno::Reference < XInterface > () );
rMemGrabber >> n8; // Version
rMemGrabber.skipBytes( 4 ); // skip NameCRC32
s = rtl::OUString::intern ( (sal_Char *) rMemGrabber.getCurrentPos(),