commit e4d598e350d39c7354b1855fb55108413f0f7114
author Caolán McNamara <caolanm@redhat.com> Tue Apr 25 12:33:26 2023 +0100
committer Caolán McNamara <caolanm@redhat.com> Tue Apr 25 15:49:20 2023 +0200
tree f8d76b358c5eb7e8472f32416c3f09292294dcf3
parent 1555ba4dd9e90f0dfd39df952c3d2fd5e755e2f5

tdf#155005 fail gracefully on encountering a negative compression value

we are using sal_Int64 for this so a large enough value can be
interpreted as negative here

Change-Id: Id547a24591aca4b6ed7b7955621641a0666b0bd5
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150925
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
Tested-by: Jenkins
Tested-by: Caolán McNamara <caolanm@redhat.com>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>

package/source/zipapi/ZipFile.cxx

diff --git a/package/source/zipapi/ZipFile.cxx b/package/source/zipapi/ZipFile.cxx
index 8280336..d5c6411 100644
--- a/package/source/zipapi/ZipFile.cxx
+++ b/package/source/zipapi/ZipFile.cxx
@@ -1204,6 +1204,12 @@ bool ZipFile::checkSizeAndCRC( const ZipEntry& aEntry )
    if( aEntry.nMethod == STORED )
        return ( getCRC( aEntry.nOffset, aEntry.nSize ) == aEntry.nCrc );

    if (aEntry.nCompressedSize < 0)
    {
        SAL_WARN("package", "bogus compressed size of: " << aEntry.nCompressedSize);
        return false;
    }

    getSizeAndCRC( aEntry.nOffset, aEntry.nCompressedSize, &nSize, &nCRC );
    return ( aEntry.nSize == nSize && aEntry.nCrc == nCRC );
}