On Tue, Jun 29, 2021 at 10:24 PM Stefan Bodewig <bode...@apache.org> wrote:
> (4) don't catch RuntimeExceptions at all, just document broken archives > can cause arbitrary RuntimeExceptions and code that tries to read > archives from untrusted sources is expected to deal with them > itself. Strongly in favour of this one. It is the obvious implementation strategy. If a user gets an Exception, and uses the archive anyways, think of the old Unix saying: It is not UNIX’s job to stop you from shooting your foot. If you so choose to do so, then it is UNIX’s job to deliver Mr. Bullet to Mr Foot in the most efficient way it knows. Translated: It is not the job of commons-compress to stop you from using a corrupt archive. If you choose to do so, then ... Jochen -- Look, that's why there's rules, understand? So that you think before you break 'em. -- (Terry Pratchett, Thief of Time) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org