classification
Title: Allow filename mismatch in local and central directories in zipfile.py
Type: enhancement Stage: needs patch
Components: Versions: Python 3.9
process
Status: open Resolution:
Dependencies: Superseder:
Assigned To: Nosy List: cheryl.sabella, gregory.p.smith
Priority: normal Keywords:

Created on 2020-01-14 11:53 by cheryl.sabella, last changed 2020-01-14 11:53 by cheryl.sabella.

Messages (1)
msg359966 - (view) Author: Cheryl Sabella (cheryl.sabella) * (Python committer) Date: 2020-01-14 11:53
This is being opened from the report on GH3035.

During malware research I bumped int problem with my Python based file analyzer: miscreants are modifying ZIP file header parts so, that python based automated analysis tools are unable to process the contents but intended clients are able to open the files with end-user applications and extract the possibly malicious contents. Proposed patch makes it possible to process the ZIP files even if such conditions occur. Default behavior remains the same (raise BadZipFile exception).
History
Date User Action Args
2020-01-14 11:53:00cheryl.sabellacreate