Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

minizip_erase() corrupts an encrypted zip archive #836

Open
Claybird opened this issue Jan 4, 2025 · 0 comments
Open

minizip_erase() corrupts an encrypted zip archive #836

Claybird opened this issue Jan 4, 2025 · 0 comments

Comments

@Claybird
Copy link

Claybird commented Jan 4, 2025

Hello,

I found the minizip call (i.e., equiv. to minizip_erase() function in minizip.c) corrupts an encrypted zip archive.

$ unzip -p test_password_abcde.zip
> [test_password_abcde.zip] test.txt password:<password here>
> abcde
$ minizip -e test_password_abcde.zip some_non_existing_entry
> minizip-ng 4.0.7 - https://github.com/zlib-ng/minizip-ng
> ---------------------------------------------------
> -e test_password_abcde.zip some_non_existing_entry
> Copying test.txt
$ unzip -p test_password_abcde.zip
> [test_password_abcde.zip] test.txt password:<password here>
> password incorrect--reenter:<password here>
> password incorrect--reenter:<password here>
$

The test_password_abcde.zip is a test archive that contains test.txt and its content is abcde, with password abcde.

I confirmed this issue on Windows 11 x64 and Ubuntu 24.04 on WSL, so it does not depend on operating systems.
I also found this issue occurs in 4.0.7 and latest develop commit cf5404b.

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant