bodgit / sevenzip / 37502306630

78%

push

github

fix: enforce the declared length of file properties (#505)

Each file property declares the length of its data, but only names
and skipped properties used it. If a known property's data was longer
than its parse needed, the leftover bytes were read as the next
property ID, derailing the rest of the files info. If it was shorter,
the parse read on into the following property without noticing.

Read each property through a reader limited to its declared length,
so a short property fails with io.ErrUnexpectedEOF, and as 7-Zip does,
reject any property with unused data with errPropertyLength. The
length is also range checked when it's read.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

24 of 28 new or added lines in 1 file covered. (85.71%)

2024 of 2608 relevant lines covered (77.61%)

0.88 hits per line