#42181 [Opn->Bgs]: corrupted bz2-Files

ID: 42181 Updated by: bjori@php.net Reported By: markus dot hoefer at med dot uni-muenchen dot de -Status: Open +Status: Bogus Bug Type: Website problem PHP Version: Irrelevant New Comment: To make sure the bz2 extension in PHP doesn't crash or have any security related problems when dealing with broken bz2 files we have (intentionally) broken bz2 files in the test suite. Previous Comments: ------------------------------------------------------------------------ [2007-08-02 18:21:57] markus dot hoefer at med dot uni-muenchen dot de Thanks for your quick reply. The mirror was de2.php.net Speedbone. So why tells bzip2 that the files have CRC errors >/php-5.2.3/ext/bz2/tests # bzip2 -t 004_2.txt.bz2 >bzip2: 004_2.txt.bz2: data integrity (CRC) error in data > >You can use the `bzip2recover' program to attempt to recover >data from undamaged sections of corrupted files. The problem is, our customers can't download the archive because our virusscanner reclaims the whole file as corrupted. ------------------------------------------------------------------------ [2007-08-02 15:28:28] bjori@php.net On second look, this is intentional. These files are part of the ext/bz2 test suite. ------------------------------------------------------------------------ [2007-08-02 15:26:34] bjori@php.net Which mirror did you use? ------------------------------------------------------------------------ [2007-08-02 14:10:53] markus dot hoefer at med dot uni-muenchen dot de Description: ------------ I think the source code packages (php-5.2.3.tar.gz and php-5.2.3.tar.bz2) contains corrupted bz2-files in ext/bz2/tests/ Corrupted files: 004_1.txt.bz2 an 004_2.txt.bz2 So Virusscanners on Firewalls have problems to scan the .tar.gz and .tar.bz2 Archives and will block the whole archive. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=42181&edit=1