Bug 15286 - unzip can't decompress files created after 2038 on 32 bits systems
Summary: unzip can't decompress files created after 2038 on 32 bits systems
Status: NEW
Alias: None
Product: Busybox
Classification: Unclassified
Component: Standard Compliance (show other bugs)
Version: 1.35.x
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: unassigned
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-01-24 13:34 UTC by Benjamin Lemouzy
Modified: 2023-01-24 13:34 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:

Attachments
zip used for the test (268 bytes, application/x-zip-compressed)
2023-01-24 13:34 UTC, Benjamin Lemouzy 		Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Benjamin Lemouzy 2023-01-24 13:34:43 UTC 
Created attachment 9491 [details]
zip used for the test

Environment
===========

- i.MX6 32 bits CPU
- Yocto Kirkstone (kirkstone-4.0.6)
- Linux 5.10.109
- glibc 2.35 (8d125a1f9145ad90c94e438858d6b5b7578686f2)
- BusyBox v1.35.0
- RFS built with "-D_TIME_BITS=64 -D_FILE_OFFSET_BITS=64" flags
- System date set after 011903142038 (2038 Jan 19 03:14:00)

Description
===========

Extracting a zip with post 2038 dated files fails.

root@board:~# unzip -l foo.zip
Archive:  foo.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
        0  02-27-2038 00:00   foo/
        0  02-27-2038 00:00   foo/bar
---------                     -------
        0                     2 files

root@board:~# unzip foo.zip
Archive:  foo.zip
error: invalid zip file with overlapped components (possible zip bomb)