ZIP: Use last modified time from basic header when validating zip decryption #613

Closed
opened 2026-01-29 22:14:38 +00:00 by claunia · 0 comments
Owner

Originally created by @DannyBoyk on GitHub (Jan 26, 2024).

When support was added for the UnixTimeExtraField a little while ago, zip decryption validation was broken if a zip is encrypted and has UnixTimeExtraFields present. The zip encryption uses the basic header's last modified time value and not the times from the UnixTimeExtraField.

PR to fix incoming.

Originally created by @DannyBoyk on GitHub (Jan 26, 2024). When support was added for the UnixTimeExtraField a little while ago, zip decryption validation was broken if a zip is encrypted and has UnixTimeExtraFields present. The zip encryption uses the basic header's last modified time value and not the times from the UnixTimeExtraField. PR to fix incoming.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/sharpcompress#613