commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allison, Timothy B." <>
Subject [COMPRESS] zip-bomb prevention for Z?
Date Thu, 13 Apr 2017 18:35:55 GMT
On TIKA-1631 [1], users have observed that a corrupt Z file can cause an OOM at Internal_.InternalLZWStream.initializeTable.
 Should we try to protect against this at the Tika level, or should we open an issue on commons-compress's

A second question, we're creating a stream with the CompressorStreamFactory when all we want
to do is detect.  Is there a recommended way to detect the type of compressor without creating
a stream?

Thank you!



View raw message