miniz-cpp icon indicating copy to clipboard operation
miniz-cpp copied to clipboard

Fix zip_file::remove_comment() length checks

Open cleeus opened this issue 3 years ago • 1 comments

The zip_file::remove_comment() member function is missing a few important length checks that can lead to crashes with invalid zip file input. As far as I can see, this is a potential security issue.

cleeus avatar Oct 21 '20 08:10 cleeus

@cleeus thanks, this is helpful

yhyu13 avatar Mar 09 '21 07:03 yhyu13