changeset:   100034:2edbdb79cd6d
branch:      2.7
parent:      100031:89a84ada27c5
user:        Benjamin Peterson <benjamin@python.org>
date:        Thu Jan 21 22:02:46 2016 -0800
files:       Modules/zipimport.c
description:
reject negative data_size


diff -r 89a84ada27c5 -r 2edbdb79cd6d Modules/zipimport.c
--- a/Modules/zipimport.c	Thu Jan 21 21:57:17 2016 -0500
+++ b/Modules/zipimport.c	Thu Jan 21 22:02:46 2016 -0800
@@ -861,6 +861,10 @@
                           &date, &crc)) {
         return NULL;
     }
+    if (data_size < 0) {
+        PyErr_Format(ZipImportError, "negative data size");
+        return NULL;
+    }
 
     fp = fopen(archive, "rb");
     if (!fp) {