Uploaded image for project: 'Red Hat Decision Manager'
  1. Red Hat Decision Manager
  2. RHDM-1468

createKieBase fails with org.apache.poi.ooxml.POIXMLException after upgrading to 7.8.0

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Major Major
    • 7.9.1.GA
    • 7.8.0.GA
    • BRE
    • False
    • False
    • Documentation (Ref Guide, User Guide, etc.)
    • CR1
    • CR2
    • +
    • Undefined
    • 2020 Week 43-45 (from Okt 19)

      After upgrading to 7.8.0, building kieBase fails with the following exception.

      org.apache.poi.ooxml.POIXMLException: Zip bomb detected! The file would exceed the max. ratio of compressed file size to the size of the expanded data.
This may indicate that the file is used to inflate memory usage and thus could pose a security risk.
You can adjust this limit via ZipSecureFile.setMinInflateRatio() if you need to work with files which exceed this limit.
Uncompressed size: 359166, Raw/compressed size: 3584, ratio: 0.009979
Limits: MIN_INFLATE_RATIO: 0.010000, Entry: xl/styles.xml

      Building kjar by kie-mvn-plugin fails as well.
      This is due to upgrade of Apache POI version to 4.1.2.
      Please provide the option to configure this limit.

        1. zip-bomb-test.zip
          35 kB

              mfusco@redhat.com Mario Fusco
              rhn-support-hmiura Hiroko Miura
              Daniel Rosa Daniel Rosa
              Daniel Rosa Daniel Rosa
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: