bpo-29774: Improve error reporting for corrupted extra field in ZIP file. (python#583)

serhiy-storchaka · vstinner · commit feccdb2a249a · 2017-03-09T17:34:03.000+01:00
diff --git a/Lib/zipfile.py b/Lib/zipfile.py
@@ -438,7 +438,9 @@ def _decodeExtra(self):
         unpack = struct.unpack
         while len(extra) >= 4:
             tp, ln = unpack('<HH', extra[:4])
-            if tp == 1:
+            if ln+4 > len(extra):
+                raise BadZipFile("Corrupt extra field %04x (size=%d)" % (tp, ln))
+            if tp == 0x0001:
                 if ln >= 24:
                     counts = unpack('<QQQ', extra[4:28])
                 elif ln == 16:
