On Tue, 16 Jan 2024 13:40:18 GMT, Jaikiran Pai <j...@openjdk.org> wrote:

>> Eirik Bjørsnøs has updated the pull request incrementally with two 
>> additional commits since the last revision:
>> 
>>  - Remove trailing whitespace
>>  - Remove trailing whitespace
>
> src/java.base/share/classes/java/util/zip/ZipInputStream.java line 534:
> 
>> 532: 
>> 533:         long csize = get32(tmpbuf, LOCSIZ);
>> 534:         long size = get32(tmpbuf, LOCLEN);
> 
> Hello Eirik, I suspect this part of the change has an issue. Before reading 
> the `tmpbuf` for compressed and uncompressed sizes, there will be 32 bits of 
> CRC, which should be read first. This now skips those 32 CRC bits and reads 
> them (in the else block) after reading these sizes and that can cause 
> incorrect LOC data.

The Github actions job which runs tier1 is all successful with this proposed 
change. So I'm a bit surprised that the tests didn't catch any issues, which 
makes me wonder if we have enough test coverage that covers this change.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/12524#discussion_r1453445673

Reply via email to