Add a length check when extra field parsed

code-sunbo · code-sunbo · commit f2830d0ca002 · 2024-07-11T16:01:37.000+08:00
Signed-off-by: code-sunbo &lt;bb.sunbo@huawei.com&gt;
diff --git a/zipEntry.js b/zipEntry.js
@@ -193,7 +193,7 @@ module.exports = function (/** object */ options, /*Buffer*/ input) {
         try {
             var offset = 0;
             var signature, size, part;
-            while (offset < data.length) {
+            while (offset + 4 < data.length) {
                 signature = data.readUInt16LE(offset);
                 offset += 2;
                 size = data.readUInt16LE(offset);
