zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

Summary The symbolic-link branch of ZipArchive::extractinternal allocates a buffer using an attacker-declared size before reading any entry data. A 112-byte archive terminates the extracting process with SIGABRT through this infallible allocation. Details rust cfganyunix, windows if file.issymlin...