RFR: 7036144: GZIPInputStream readTrailer uses faulty available() test for end-of-stream [v9]
Louis Bergelson
duke at openjdk.org
Fri Apr 26 17:46:10 UTC 2024
On Sun, 17 Mar 2024 22:53:55 GMT, Archie Cobbs <acobbs at openjdk.org> wrote:
>> `GZIPInputStream`, when looking for a concatenated stream, relies on what the underlying `InputStream` says is how many bytes are `available()`. But this is inappropriate because `InputStream.available()` is just an estimate and is allowed (for example) to always return zero.
>>
>> The fix is to ignore what's `available()` and just proceed and see what happens. If fewer bytes are available than required, the attempt to extend to another stream is canceled just as it was before, e.g., when the next stream header couldn't be read.
>
> Archie Cobbs has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 10 additional commits since the last revision:
>
> - Merge branch 'master' into JDK-7036144
> - Back-out Javadoc addition; to be added in a separate issue.
> - Document the handling of concatenated streams.
> - Merge branch 'master' into JDK-7036144
> - Merge branch 'master' into JDK-7036144
> - Merge branch 'master' into JDK-7036144
> - Address third round of review comments.
> - Address second round of review comments.
> - Address review comments.
> - Fix bug in GZIPInputStream when underlying available() returns short.
Is there any chance of backporting this to java 17 or 21? What's involved in doing that?
-------------
PR Comment: https://git.openjdk.org/jdk/pull/17113#issuecomment-2079818795
More information about the core-libs-dev
mailing list