Skip to content

Issue: Error Unzipping Provided Data - "Invalid Zip File with Overlapped Components (Possible Zip Bomb)" #18

Description

@ZhouQiang19980220

Hi there,
I'm encountering an issue when trying to unzip the data file(s) provided in this project. When running the unzip command, I get the following error message:

error: invalid zip file with overlapped components (possible zip bomb)
To unzip the file anyway, rerun the command with UNZIP_DISABLE_ZIPBOMB_DETECTION=TRUE environment variable

Steps to Reproduce:

  1. Download the data file(s) from https://drive.google.com/file/d/1B5_q_MT3GYxmHLrMK0-lAqgpbAuikKEz/view?usp=sharing
  2. Attempt to unzip the file using the standard unzip command: unzip amazon_data
  3. The error above is thrown, preventing successful extraction

Additional Context:

  1. I’ve confirmed the download is complete (checked file hash against the provided value if available, or re-downloaded multiple times to rule out corruption)
  2. While the error suggests using UNZIP_DISABLE_ZIPBOMB_DETECTION=TRUE to bypass the check, I’m hesitant to do so for security reasons (as zip bombs can pose risks to system storage/performance)
  3. My unzip version: UnZip 6.00 of 20 April 2009, by Info-ZIP. Maintained by C. Spieler. Send
    bug reports using http://www.info-zip.org/zip-bug.html; see README for details.

Latest sources and executables are at ftp://ftp.info-zip.org/pub/infozip/ ;
see ftp://ftp.info-zip.org/pub/infozip/UnZip.html for other sites.

Compiled with gcc 4.8.5 20150623 (Red Hat 4.8.5-44) for Unix (Linux ELF) on Jan 13 2022.

Could you help look into this? It would be great if:

  1. The zip file can be fixed to avoid the "overlapped components" issue (so it works with standard unzip tools without bypassing security checks), or
  2. You can confirm that the file is safe and provide guidance on verifying its integrity before using the bypass flag.
    Thanks for your work on this project—I really appreciate it! Let me know if you need more details from my side.
    Best regards

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions