Skip to content

Commit f2830d0

Browse files
committed
Add a length check when extra field parsed
Signed-off-by: code-sunbo <[email protected]>
1 parent ba46576 commit f2830d0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

zipEntry.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -193,7 +193,7 @@ module.exports = function (/** object */ options, /*Buffer*/ input) {
193193
try {
194194
var offset = 0;
195195
var signature, size, part;
196-
while (offset < data.length) {
196+
while (offset + 4 < data.length) {
197197
signature = data.readUInt16LE(offset);
198198
offset += 2;
199199
size = data.readUInt16LE(offset);

0 commit comments

Comments
 (0)