Thread overview
[Issue 20239] chameleon zip-file should be rejected by std.zip
Sep 25, 2019
Berni
Sep 25, 2019
Berni
Sep 25, 2019
Dlang Bot
Oct 07, 2019
Dlang Bot
September 25, 2019
https://issues.dlang.org/show_bug.cgi?id=20239

Berni <dlang@croco-puzzle.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|wrong result when           |chameleon zip-file should
                   |extracting with std.zip     |be rejected by std.zip

--
September 25, 2019
https://issues.dlang.org/show_bug.cgi?id=20239

--- Comment #1 from Berni <dlang@croco-puzzle.com> ---
I just learned, that this is called a chameleon file. The result depends on the parser used. Such files should be rejected as they can be assumed to be malware.

--
September 25, 2019
https://issues.dlang.org/show_bug.cgi?id=20239

Dlang Bot <dlang-bot@dlang.rocks> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |pull

--- Comment #2 from Dlang Bot <dlang-bot@dlang.rocks> ---
@crocopaw created dlang/phobos pull request #7198 "Fix issue 20239 - chameleon zip-file should be rejected by std.zip" fixing this issue:

- Fix issue 20239 - chameleon zip-file should be rejected by std.zip

https://github.com/dlang/phobos/pull/7198

--
October 07, 2019
https://issues.dlang.org/show_bug.cgi?id=20239

Dlang Bot <dlang-bot@dlang.rocks> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from Dlang Bot <dlang-bot@dlang.rocks> ---
dlang/phobos pull request #7198 "Fix issue 20239 - chameleon zip-file should be rejected by std.zip" was merged into master:

- d750324351ff658204164f3268fed8d2c9cb6055 by Berni:
  Fix issue 20239 - chameleon zip-file should be rejected by std.zip

https://github.com/dlang/phobos/pull/7198

--