This is an automated email from the ASF dual-hosted git repository. jimjag pushed a commit to branch AOO50X in repository https://gitbox.apache.org/repos/asf/openoffice.git
commit 5ac6444975cad3b1fed3c34a592131d806712195 Author: Arrigo Marchiori <[email protected]> AuthorDate: Tue Sep 15 21:40:39 2026 +0200 More checks (cherry picked from commit 66ab9c1188ef75c84225c856a87bc93d575247ca) --- main/package/source/package/zipapi/ZipFile.cxx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/main/package/source/package/zipapi/ZipFile.cxx b/main/package/source/package/zipapi/ZipFile.cxx index 32b6e4fffe..921d144bc3 100644 --- a/main/package/source/package/zipapi/ZipFile.cxx +++ b/main/package/source/package/zipapi/ZipFile.cxx @@ -655,6 +655,8 @@ static void readExtraFields( MemoryByteGrabber &rMemGrabber, sal_Int16 nLength, throw ZipException( OUString( RTL_CONSTASCII_USTRINGPARAM ( "Invalid ZIP extra fields" ) ), uno::Reference < XInterface > () ); switch ( nHeaderID ) { case 0x7075: // Info-ZIP Unicode Path Extra Field + if ( nDataSize < 5 ) + throw ZipException( OUString( RTL_CONSTASCII_USTRINGPARAM ( "Invalid size for ZIP unicode path extra field" ) ), uno::Reference < XInterface > () ); rMemGrabber >> n8; // Version rMemGrabber.skipBytes( 4 ); // skip NameCRC32 s = rtl::OUString::intern ( (sal_Char *) rMemGrabber.getCurrentPos(),
