Skip to content

Exception while extracting file from ZIP with non-matching file name in central directory #75358

Closed as duplicate
Closed as duplicate
Exception while extracting file from ZIP with non-matching file name in central directory#75358
Labels
stdlibStandard Library Python modules in the Lib/ directorytype-bugAn unexpected behavior, bug, or error

Description

@zyxtarmo
zyxtarmo
mannequin
opened on Aug 10, 2017
BPO 31175
Nosy @zyxtarmo
PRs
  • Allow filename mismatch in local and central directories in zipfile.py #3035
    		•
    Files
  • ZIP_filename_confusion.pdf: Small research paper on the topic
  • zipfile.patch
    		•

    Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
closed_at = None
created_at = <Date 2017-08-10.13:05:08.569>
labels = ['type-bug', 'library']
title = 'Exception while extracting file from ZIP with non-matching file name in central directory'
updated_at = <Date 2017-08-10.13:08:08.683>
user = 'https://github.com/zyxtarmo'

    bugs.python.org fields:

    activity = <Date 2017-08-10.13:08:08.683>
actor = 'zyxtarmo'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['Library (Lib)']
creation = <Date 2017-08-10.13:05:08.569>
creator = 'zyxtarmo'
dependencies = []
files = ['47073', '47074']
hgrepos = []
issue_num = 31175
keywords = ['patch']
message_count = 2.0
messages = ['300080', '300081']
nosy_count = 1.0
nosy_names = ['zyxtarmo']
pr_nums = ['3035']
priority = 'normal'
resolution = None
stage = None
status = 'open'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue31175'
versions = ['Python 2.7']

    Activity

    1. zyxtarmo commented on Aug 10, 2017

      @zyxtarmo
      zyxtarmomannequin
      on Aug 10, 2017
      MannequinAuthor

      The problem: miscreants are modifying ZIP file header parts so, that Python based automated analysis tools are unable to process the contents of the ZIP file but intended clients are able to open the file and extract the possibly malicious contents.

      Github pull request contains patch addressing the issue so that developer can make conscious decision to allow extraction process to complete. Quite important feature for security researchers.

    2. zyxtarmo
      added
      stdlibStandard Library Python modules in the Lib/ directory
      type-bugAn unexpected behavior, bug, or error
      on Aug 10, 2017

    3. zyxtarmo commented on Aug 10, 2017

      @zyxtarmo
      zyxtarmomannequin
      on Aug 10, 2017
      MannequinAuthor

      Proposed patch

    4. ezio-melotti
      transferred this issue fromon Apr 10, 2022
    5. serhiy-storchaka
      added this to @serhiy-storchaka's project python-zipfileon May 8, 2022
    6. serhiy-storchaka
      added this to Zipfile issues 📦on May 19, 2022

    7. serhiy-storchaka commented on May 18, 2026

      @serhiy-storchaka
      serhiy-storchaka
      on May 18, 2026
      Member

      This is a duplicate of #51088.

    8. serhiy-storchaka
      closed this as a duplicateof zipfile can't extract file: file name in directory and header differ #51088 on May 18, 2026
    9. github-project-automation
      moved this to Done in Zipfile issues 📦on May 18, 2026
    10. github-project-automation
      moved this to Done in @serhiy-storchaka's project python-zipfileon May 18, 2026
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Metadata

    Metadata

    Assignees

    No one assigned

      Labels

      stdlibStandard Library Python modules in the Lib/ directorytype-bugAn unexpected behavior, bug, or error

      Projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions