RFR: 8313765: Invalid CEN header (invalid zip64 extra data field size) [v9]

[Sergey Bylokhov]

On Tue, 15 Aug 2023 23:13:00 GMT, Volker Simonis <simonis at openjdk.org> wrote:

>As far as I understand you can manually create "artificial" zip files which can be processed by the zip tool and previous versions of the JDK but not by new ones.

It can be processed by the new/latest version of JDK8.

> As long as these kind of files aren't automatically generated by common tools, I don't see that as a real regression.

It is clearly a regression. All that new checks should be proved to be based on some statement from the specification otherwise - such checks should be changed or deleted. As of now the strict check of the size does not based on the spec nor the behavior of the zip cmd.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/15273#issuecomment-1679869021