Package: zipios++
Version: 0.1.5.9+cvs.2004.02.07-3.4
Severity: important

If ZipInputStream is constructed with an invalid stream (e.g. an empty
stream), the constructor enters an infinite loop, making any
application that uses the library in this way consume 100% CPU. This
happens because the constructor ultimately calls the readUint16 method
found in zipheadio.h, which doesn't check the stream for EOF or other
reading errors in a reading loop. Since the behavior I expected was
that the constructor threw an exception, I propose patching the
library, making it throw an exception on stream reading errors. The
proposed change is attached as a diff.

--
Fernando Diaz Alonso
Ingeniero Civil Electronico
PUCV

Attachment: parcheZipios++
Description: Binary data

Reply via email to