ronomon/zip
View on GitHub ↗ ★ 257 JavaScript
Robust ZIP decoder with defenses against dangerous compression ratios, spec deviations, malicious archive signatures, mismatching local and central directory headers, ambiguous UTF-8 filenames, directory and symlink traversals, invalid MS-DOS dates, overlapping headers, overflow, underflow, sparseness, accidental buffer bleeds etc.
4 mentions on Hacker News by 2 people: 1 story, 3 comments · first 2019-07-04 · latest 2025-08-26
20082026
-
1. I think you are thinking of https://github.com/ronomon/zip ? The description for pure says it is a static analysis tool for zip files. That makes it a linter in my book. 2. I see, thanks.
comment by pabs3 · 2025-08-26 · in My ZIP isn't your ZIP: Identifying and exploiting semantic gaps between parsers -
…with simpler zip bombs. You would be amazed at what can crash an antivirus engine. Coincidentally, https://github.com/ronomon/zip can catch David Fifield's zip bomb.
comment by jorangreef · 2020-05-10 · in How to crash an email server with a single email (2018) -
▲ 35
Show HN: A better zip decoderstory by jorangreef · 2019-07-05 · 2 comments
-
Thanks for the encouragement: https://github.com/ronomon/zip
comment by jorangreef · 2019-07-04 · in A better zip bomb