DevComp/zip-rs-wasm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Bug fix: skip invalid filenames during write fuzz

Browse source
This commit is contained in:
Chris Hennick 2023-05-11 19:25:32 -07:00
parent dc351196e2
commit bf867c5012
No known key found for this signature in database
GPG key ID: 25653935CC8B6C74
3 changed files with 25 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
Cargo.toml
View file

@ -24,6 +24,7 @@ pbkdf2 = {version = "0.12.1", optional = true }
sha1 = {version = "0.10.5", optional = true } sha1 = {version = "0.10.5", optional = true }
time = { version = "0.3.21", optional = true, default-features = false, features = ["std"] } time = { version = "0.3.21", optional = true, default-features = false, features = ["std"] }
zstd = { version = "0.12.3", optional = true } zstd = { version = "0.12.3", optional = true }
visibility = "0.0.1"
[target.'cfg(any(all(target_arch = "arm", target_pointer_width = "32"), target_arch = "mips", target_arch = "powerpc"))'.dependencies] [target.'cfg(any(all(target_arch = "arm", target_pointer_width = "32"), target_arch = "mips", target_arch = "powerpc"))'.dependencies]
crossbeam-utils = "0.8.15" crossbeam-utils = "0.8.15"

3
fuzz/fuzz_targets/fuzz_write.rs
View file

@ -51,6 +51,9 @@ impl FileOperation {
fn do_operation<T>(writer: &mut RefCell<zip_next::ZipWriter<T>>, fn do_operation<T>(writer: &mut RefCell<zip_next::ZipWriter<T>>,
operation: &FileOperation) -> Result<(), Box<dyn std::error::Error>> operation: &FileOperation) -> Result<(), Box<dyn std::error::Error>>
where T: Read + Write + Seek { where T: Read + Write + Seek {
if zip_next::write::validate_name(&operation.get_name()).is_err() {
return Ok(());
}
match operation { match operation {
FileOperation::Write {file, mut options, ..} => { FileOperation::Write {file, mut options, ..} => {
if file.contents.iter().map(Vec::len).sum::<usize>() >= u32::MAX as usize { if file.contents.iter().map(Vec::len).sum::<usize>() >= u32::MAX as usize {

9
src/write.rs
View file

@ -439,7 +439,7 @@ impl<W: Write + Seek> ZipWriter<W> {
{ {
let header_start = self.inner.get_plain().stream_position()?; let header_start = self.inner.get_plain().stream_position()?;
let name = name.into(); let name = name.into();
Self::validate_name(&name)?; validate_name(&name)?;
let permissions = options.permissions.unwrap_or(0o100644); let permissions = options.permissions.unwrap_or(0o100644);
let file = ZipFileData { let file = ZipFileData {
@ -1032,7 +1032,11 @@ impl<W: Write + Seek> ZipWriter<W> {
self.insert_file_data(dest_data)?; self.insert_file_data(dest_data)?;
Ok(()) Ok(())
} }
fn validate_name(name: &String) -> ZipResult<()> { }
#[cfg_attr(fuzzing, visibility::make(pub))]
#[cfg_attr(fuzzing, allow(missing_docs))]
pub(crate) fn validate_name(name: &String) -> ZipResult<()> {
for (index, _) in name.match_indices("PK") { for (index, _) in name.match_indices("PK") {
if name.len() >= index + 4 { if name.len() >= index + 4 {
let magic_number = name[index..index + 4] let magic_number = name[index..index + 4]
@ -1053,7 +1057,6 @@ impl<W: Write + Seek> ZipWriter<W> {
} }
Ok(()) Ok(())
} }
}
impl<W: Write + Seek> Drop for ZipWriter<W> { impl<W: Write + Seek> Drop for ZipWriter<W> {
fn drop(&mut self) { fn drop(&mut self) {