Handling zip/apk files with many nested levels by tika-mapper-attachments

Elastic Stack Elasticsearch
1

Hi,

if I try to index an apk file, tika tries to extract it and throws the
following exception:

{"error":"MapperParsingException[Failed to extract [100000] characters of
text for [null]]; nested: TikaException[Zip bomb detected!]; nested:
SecureSAXException[Suspected zip bomb: 10 levels of package entry nesting];
","status":400}

Can I somewhere increase the allowed depth of levels? Or can I somehow
prevent extracting files with high nesting levels in order to avoid this
exception?

I'm using elasticsearch 0.20.2 and mapper-attachments 1.6.0

--

2

Same problem still exists in elasticsearch 0.20.6. Does anybody have an
idea how to avoid this?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

3

Hey,

you cannot configure that in elasticsearch, To be honest, I am not sure, if
this can be configured upstream in Tika (where the exception occurs from),
see
https://issues.apache.org/jira/browse/TIKA-860
https://issues.apache.org/jira/browse/TIKA-741

if you find another solution, please put it here as well :slight_smile:

On Mon, Apr 15, 2013 at 12:10 AM, nordsee hullmann.arne@googlemail.comwrote:

Same problem still exists in elasticsearch 0.20.6. Does anybody have an
idea how to avoid this?

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.