Secure decompression
AssigneeSap SE
InventorDeepak MP
Life of this patent
Estimating the term…
Abstract
A method and system including receiving a main input stream for a compressed file at an application server, wherein the main input stream includes two or more file streams; extracting a file-type extension from each file stream input stream; determining the file-type extension is supported; determining, for each file stream with the supported file-type extension, a signature for the file stream with the supported file-type extension is valid; determining, for each valid file stream, a size of the file is less than a threshold level; and storing the valid file stream on a storage device when the size of the file is less than the threshold level. Numerous other aspects are provided.
Claims20
A computer-implemented method comprising:
- receiving a main input stream for a compressed file at an application server, wherein the main input stream includes two or more file streams;
- extracting a file-type extension from each file stream input stream;
- determining the file-type extension is supported;
- determining, for each file stream with the supported file-type extension, a signature for the file stream with the supported file-type extension is valid;
- determining, for each valid file stream, a size of the file is less than a threshold level;
- and
- storing the valid file stream on a storage device when the size of the file is less than the threshold level.
A system comprising:
- a main input stream source;
- an application server;
- a decompression module including a file extension module, a file content type detector module, a file syntactic analyzer module, and a file size checker module;
- a storage device;
- and
- a decompression processor in communication with the decompression module and operative to execute processor-executable process steps to cause the system to:
- receive a main input stream for a compressed file at the application server, wherein the input stream includes two or more file streams;
- extract, via the file extension module, a file-type extension from each file stream;
- determine the file-type extension is supported;
- determine, via the file content type detector module, a signature for the file stream with the supported file-type extension is valid;
- determine, via the file size checker module, a size of the file is less than a threshold level;
- and
- store the valid file stream on the storage device when the size of the file is less than the threshold level.
A non-transitory computer-readable medium storing program code, the program code executable by a computer system to cause the computer system to:
- receive a main input stream for a compressed file at the application server, wherein the input stream includes two or more file streams;
- extract, via the file extension module, a file-type extension from each file stream;
- determine the file-type extension is supported;
- determine, via the file content type detector module, a signature for the file with the supported file-type extension is valid;
- determine, via the file size checker module, a size of the valid file is less than a threshold level;
- and
- store the file stream on a storage device when the size of the file is less than the threshold level.
Dependencies are inferred from the claim text.