[php-src] PR #23240: ext/zip: ZipArchive::extractTo() and getFrom*() success on CRC-corrup…
| From: | devnexen | Date: | Thu, 13 Aug 2026 05:59:00 +0000 |
| Subject: | [php-src] PR #23240: ext/zip: ZipArchive::extractTo() and getFrom*() success on CRC-corrup… | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-37815@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23240
Author: devnexen
…ted entries.
zip_fclose() returns positive error codes, so the extraction's n < 0 check treated a failed
read as success and wrote corrupt data to disk. getFromName()/getFromIndex() read exactly sb.size
bytes, never reaching end of file where libzip validates the CRC, and returned the corrupt data
silently. Read errors now fail with a warning.