RFR: 8079841: Buffer underflow with empty zip entry names

Martin Buchholz martinrb at google.com
Tue May 12 21:58:47 UTC 2015


Committed!

On Fri, May 8, 2015 at 11:33 AM, Xueming Shen <xueming.shen at oracle.com>
wrote:

> looks good!
>
>
> On 5/8/15 10:58 AM, Jeremy Manson wrote:
>
>> There's a fairly harmless buffer underflow with empty zip names in libzip.
>> Martin has offered to sponsor this (right, Martin?).
>>
>> We detected this with ASan, an automatic memory error and leak checking
>> tool built into Clang/LLVM.  This is one of the reasons that Alexander
>> Smundak asked if we could backport clang support to JDK8.
>>
>> Bug:
>> https://bugs.openjdk.java.net/browse/JDK-8079841
>>
>> Webrev:
>> http://cr.openjdk.java.net/~jmanson/8079841/webrev.00/
>>
>
>



More information about the core-libs-dev mailing list