You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@poi.apache.org by bu...@apache.org on 2018/03/18 15:22:14 UTC

[Bug 62187] Compiling with Java 10 fails with ClassCastException: org.apache.poi.openxml4j.util.ZipSecureFile$ThresholdInputStream cannot be cast to java.base/java.util.zip.ZipFile$ZipFileInputStream

https://bz.apache.org/bugzilla/show_bug.cgi?id=62187

--- Comment #1 from Nick Burch <ap...@gagravarr.org> ---
We can't be the only project wanting to do zipbomb-proof processing using the
JDK provided Zip classes. Maybe worth a quick post to the openjdk 10 list to
ask how they expect people doing it the old way to not loose security when
upgrading?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org