RFR: 8079841: Buffer underflow with empty zip entry names
martinrb at google.com
Tue May 12 21:58:47 UTC 2015
On Fri, May 8, 2015 at 11:33 AM, Xueming Shen <xueming.shen at oracle.com>
> looks good!
> On 5/8/15 10:58 AM, Jeremy Manson wrote:
>> There's a fairly harmless buffer underflow with empty zip names in libzip.
>> Martin has offered to sponsor this (right, Martin?).
>> We detected this with ASan, an automatic memory error and leak checking
>> tool built into Clang/LLVM. This is one of the reasons that Alexander
>> Smundak asked if we could backport clang support to JDK8.
More information about the core-libs-dev