https://issues.apache.org/bugzilla/show_bug.cgi?id=56865

            Bug ID: 56865
           Summary: Limit number of bytes (by counting them) while opening
                    office docs
           Product: POI
           Version: 3.11-dev
          Hardware: PC
                OS: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: POI Overall
          Assignee: [email protected]
          Reporter: [email protected]

It would be good to limit the bytes in
org.apache.poi.openxml4j.util.ZipInputStreamZipEntrySource with a FilterStream
that counts the number of bytes up to a defined (configurable) value:

The class
org.apache.poi.openxml4j.util.ZipInputStreamZipEntrySource.FakeZipEntry uses in
its constructor the Java class java.util.zip.ZipInputStream for decompressing
the office files. Here the instance of this class could be wrapped with another
java.io.FilterInputStream that performs the byte counting, as discussed on the
[email protected] mailing list.

Checking just the ZipEntry's entry.getSize() is not enough, since this value
can be spoofed.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to