[New-bugs-announce] [issue1622] zipfile hangs on certain zip files

[Eric Huss]

New submission from Eric Huss:

Creating a ZipFile object with a certain type of zip file can cause it
to go into an infinite loop.  The problem is the new extra field parsing
routine.  It unpacks integers as a signed value, which if they are
sufficiently large (over 32767), then it will loop forever.

There are many places in the zipfile module that incorrectly unpack
values as signed integers, but this is the only place that I can
determine that causes a serious problem.

Attached is a fix.

----------
components: Library (Lib)
files: zipfile.patch
messages: 58606
nosy: ehuss
severity: normal
status: open
title: zipfile hangs on certain zip files
type: behavior
versions: Python 2.5, Python 2.6
Added file: http://bugs.python.org/file8948/zipfile.patch

__________________________________
Tracker <report at bugs.python.org>
<http://bugs.python.org/issue1622>
__________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: zipfile.patch
Type: application/octet-stream
Size: 457 bytes
Desc: not available
Url : http://mail.python.org/pipermail/new-bugs-announce/attachments/20071214/ff72c7b6/attachment.obj