Java Mailing List Archive

http://www.ant-tasks.com/

Home » Ant Developers List »

handling of malformed zip/tar/bzip files

Steve Loughran

2008-03-18



There's now a test suite of fuzzed archive files to run past
decompression tools, to see how they handle it

https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html

We may not be vulnerable to buffer overflows, but we should still test
for bad files and reject them.


--
Steve Loughran            http://www.1060.org/blogxter/publish/5
Author: Ant in Action       http://antbook.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@(protected)
For additional commands, e-mail: dev-help@(protected)

©2008 ant-tasks.com - Jax Systems, LLC, U.S.A.