http://www.perlmonks.org?node_id=11118271


in reply to Re: How do you get IO::Uncompress::Gunzip to error if the input file isn't a GZ file?
in thread How do you get IO::Uncompress::Gunzip to error if the input file isn't a GZ file?

You could use file(1) magic to check if a file is indeed a compressed file before trying to uncompress.

... but you should remember that this creates a TOCTTOU vulnerability. Also, magic checks check only for magic numbers, not for validity.

Alexander

--
Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)
  • Comment on Re^2: How do you get IO::Uncompress::Gunzip to error if the input file isn't a GZ file?

In Section Seekers of Perl Wisdom