RFD: Invalid CRC in ZipFile, ZipFileSystem
Eirik Bjørsnøs
eirbjo at gmail.com
Fri Feb 24 09:27:43 UTC 2023
>
> Indeed, but I found it a bit amusing that ZipFile (and ZipFileSystem),
> which both see the "full picture", are actually the ones to not enforce the
> CRC.
>
With the current state of affairs, it is conceivable that a single-event
upset could cause an IF_ICMPNE byte code to be flipped into an IF_ICMPLT
without this being detected by ZipFile or the byte code verifier. Similarly
a constant could be changed giving a candidate in an election 4096 extra
votes, which is what seems to have happened in Belgium in 2003:
https://en.wikipedia.org/wiki/Electronic_voting_in_Belgium
Eirik :-)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/core-libs-dev/attachments/20230224/8fbac583/attachment.htm>
More information about the core-libs-dev
mailing list