diff --git a/lib/private/Streamer.php b/lib/private/Streamer.php index 939bb4ea5d8..1d80798536e 100644 --- a/lib/private/Streamer.php +++ b/lib/private/Streamer.php @@ -75,8 +75,12 @@ class Streamer { * would still be possible to create an invalid zip32 file (for example, * a zip file from files smaller than 4GB with a central directory * larger than 4GiB), but it should not happen in the real world. + * + * We also have to check for a size above 0. As negative sizes could be + * from not fully scanned external storages. And then things fall apart + * if somebody tries to package to much. */ - if ($size < 4 * 1000 * 1000 * 1000 && $numberOfFiles < 65536) { + if ($size > 0 && $size < 4 * 1000 * 1000 * 1000 && $numberOfFiles < 65536) { $this->streamerInstance = new ZipStreamer(['zip64' => false]); } else if ($request->isUserAgent($this->preferTarFor)) { $this->streamerInstance = new TarStreamer();