From b1db7580611421309ab0be7c0801f4f89ecec440 Mon Sep 17 00:00:00 2001
From: Benjamin Peterson <benjamin@python.org>
Date: Thu, 21 Jan 2016 22:02:46 -0800
Subject: reject negative data_size

---
 Modules/zipimport.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Modules/zipimport.c b/Modules/zipimport.c
index 83fa8f9..4594dd4 100644
--- a/Modules/zipimport.c
+++ b/Modules/zipimport.c
@@ -1071,6 +1071,10 @@ get_data(PyObject *archive, PyObject *toc_entry)
                           &date, &crc)) {
         return NULL;
     }
+    if (data_size < 0) {
+        PyErr_Format(ZipImportError, "negative data size");
+        return NULL;
+    }
 
     fp = _Py_fopen_obj(archive, "rb");
     if (!fp) {
-- 
cgit v0.12