All Downloads are FREE. Search and download functionalities are using the official Maven repository.

com.powsybl.ws.commons.SecuredZipInputStream Maven / Gradle / Ivy

There is a newer version: 1.19.0
Show newest version
/**
 * Copyright (c) 2021, RTE (http://www.rte-france.com)
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
 */
package com.powsybl.ws.commons;

import java.io.IOException;
import java.io.InputStream;
import java.nio.charset.Charset;
import java.nio.charset.StandardCharsets;
import java.util.zip.ZipEntry;
import java.util.zip.ZipInputStream;

/**
 * @author Etienne Homer 
 */
public class SecuredZipInputStream extends ZipInputStream {
    private final int maxZipEntries;
    private final long maxSize;
    private int entryCount = 0;
    private int totalReadBytes = 0;

    public SecuredZipInputStream(InputStream in, int maxZipEntries, long maxSize) {
        this(in, StandardCharsets.UTF_8, maxZipEntries, maxSize);
    }

    public SecuredZipInputStream(InputStream in, Charset charset, int maxZipEntries, long maxSize) {
        super(in, charset);
        this.maxZipEntries = maxZipEntries;
        this.maxSize = maxSize;
    }

    @Override
    public ZipEntry getNextEntry() throws IOException {
        if (++entryCount > maxZipEntries) {
            throw new IllegalStateException("Zip has too many entries.");
        }
        return super.getNextEntry();
    }

    @Override
    public int read(byte[] b, int off, int len) throws IOException {
        if (len + totalReadBytes > maxSize) {
            throw new IllegalStateException("Zip size is too big.");
        }

        int readBytes = super.read(b, off, len);

        totalReadBytes += readBytes;
        if (totalReadBytes > maxSize) {
            throw new IllegalStateException("Zip size is too big.");
        }

        return readBytes;
    }
}




© 2015 - 2025 Weber Informatics LLC | Privacy Policy