This is an automated email from the ASF dual-hosted git repository. bodewig pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/commons-compress.git
commit 1dde1a3e12934a904d84907ebb509cc73d58cc57 Author: Stefan Bodewig <bode...@apache.org> AuthorDate: Sat May 22 17:28:50 2021 +0200 extra guard against illegal sparse struct values --- .../commons/compress/archivers/tar/TarArchiveStructSparse.java | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/main/java/org/apache/commons/compress/archivers/tar/TarArchiveStructSparse.java b/src/main/java/org/apache/commons/compress/archivers/tar/TarArchiveStructSparse.java index 116a15f..f21e7e8 100644 --- a/src/main/java/org/apache/commons/compress/archivers/tar/TarArchiveStructSparse.java +++ b/src/main/java/org/apache/commons/compress/archivers/tar/TarArchiveStructSparse.java @@ -37,6 +37,12 @@ public final class TarArchiveStructSparse { private final long numbytes; public TarArchiveStructSparse(final long offset, final long numbytes) { + if (offset < 0) { + throw new IllegalArgumentException("offset must not be negative"); + } + if (numbytes < 0) { + throw new IllegalArgumentException("numbytes must not be negative"); + } this.offset = offset; this.numbytes = numbytes; }