commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allison, Timothy B." <talli...@mitre.org>
Subject [COMPRESS] zip-bomb prevention for Z?
Date Thu, 13 Apr 2017 18:35:55 GMT
On TIKA-1631 [1], users have observed that a corrupt Z file can cause an OOM at Internal_.InternalLZWStream.initializeTable.
 Should we try to protect against this at the Tika level, or should we open an issue on commons-compress's
JIRA?  

A second question, we're creating a stream with the CompressorStreamFactory when all we want
to do is detect.  Is there a recommended way to detect the type of compressor without creating
a stream?

Thank you!

            Best,

                     Tim

[1] https://issues.apache.org/jira/browse/TIKA-1631
Mime
View raw message