How do you get IO::Uncompress::Gunzip to error if the input file isn't a GZ file?

[sectokia]

How do you get IO::Uncompress::Gunzip to error if the input file isn't a GZ file?

Say I have files like:

dd if=/dev/random of=test.random bs=64 count=1
dd if=/dev/zero of=test.zero bs=64 count=1
echo "hello world!" > hello.txt

And my test.pl script is:

use IO::Uncompress::Gunzip qw(gunzip $GunzipError);
my $output;
my $status = gunzip $ARGV[0] => \$output, Strict => 1 or die "Failed!"
+;
print $GunzipError;
print $output;

Then...

test.pl test.random
test.pl test.zero
test.pl hello.txt

None of those will die or give error (well test.random will if you are really lucky...)

It seems to me that if the GZIP magic header is no present the input just copies to output instead of being error?

[choroba]

Set the Transparent option to 0:

Transparent => 0|1
If this option is set and the input file/buffer is not compressed data, the module will allow reading of it anyway.
In addition, if the input file/buffer does contain compressed data and there is non-compressed data immediately following it, setting this option will make this module treat the whole file/buffer as a single data stream.
This option defaults to 1.

[parv]

You could use file(1) magic to check if a file is indeed a compressed file before trying to uncompress. For Perl there are File::MMagic and File::LibMagic among other modules to check file MIME type.

[afoken]

You could use file(1) magic to check if a file is indeed a compressed file before trying to uncompress.

... but you should remember that this creates a TOCTTOU vulnerability. Also, magic checks check only for magic numbers, not for validity.

Alexander