apache / commons-compress / 796

87%

master: 86%

Pull #91

travis-ci

Make bz2 decompressor robust to selector overflow

As explained in https://gnu.wildebeest.org/blog/mjw/2019/08/02/bzip2-and-the-cve-that-wasnt/
bz2 has historically been able to decompress wrongly formatted compressed
files, more precisely files stating more selectors that the algorithm
actually uses.
This patch replicates https://sourceware.org/ml/bzip2-devel/2019-q3/msg00007.html
and provides the same test file as described in the above article (lbzip2_32767.bz2).

5 of 5 new or added lines in 1 file covered. (100.0%)

12076 of 13869 relevant lines covered (87.07%)

2.61 hits per line