mvt-project / mvt-project/androidqf

zip file with overlapped components

Open
#73 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
281
Forks
48
Avg merge
1h 28m
Merged PRs (30d)
2

Description

When extracting androidqf aquisitions I sometimes see:

error: invalid zip file with overlapped components (possible zip bomb)
 To unzip the file anyway, rerun the command with UNZIP_DISABLE_ZIPBOMB_DETECTION=TRUE environmnent variable

However I just also saw this when a zip was manually created from an aquisition folder

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing extraction of an AndroidQF acquisition and a manually created acquisition-folder zip, comparing the reported overlapped-components error with and without UNZIP_DISABLE_ZIPBOMB_DETECTION. Trace the archive-extraction entry point and document whether the manually created archive is expected to extract successfully and what behavior should be considered done.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.