Bug 15286

Summary: unzip can't decompress files created after 2038 on 32 bits systems
Product: Busybox Reporter: Benjamin Lemouzy <blemouzy>
Component: Standard ComplianceAssignee: unassigned
Status: NEW ---    
Severity: normal CC: busybox-cvs
Priority: P5    
Version: 1.35.x   
Target Milestone: ---   
Hardware: Other   
OS: Linux   
Host: Target:
Build:
Attachments: zip used for the test

Description Benjamin Lemouzy 2023-01-24 13:34:43 UTC
Created attachment 9491 [details]
zip used for the test

Environment
===========

- i.MX6 32 bits CPU
- Yocto Kirkstone (kirkstone-4.0.6)
- Linux 5.10.109
- glibc 2.35 (8d125a1f9145ad90c94e438858d6b5b7578686f2)
- BusyBox v1.35.0
- RFS built with "-D_TIME_BITS=64 -D_FILE_OFFSET_BITS=64" flags
- System date set after 011903142038 (2038 Jan 19 03:14:00)

Description
===========

Extracting a zip with post 2038 dated files fails.

root@board:~# unzip -l foo.zip
Archive:  foo.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
        0  02-27-2038 00:00   foo/
        0  02-27-2038 00:00   foo/bar
---------                     -------
        0                     2 files

root@board:~# unzip foo.zip
Archive:  foo.zip
error: invalid zip file with overlapped components (possible zip bomb)