Skip to main content
carmenj8315827
carmenj8315827
Participant
February 8, 2021
Answered

CFzip on ColdFusion (2021 Release) Enterprise

  • February 8, 2021
  • 2 replies
  • 704 views

After the upgrade to CF 2021 Enterprise, when we attempt to unzip a file we are getting a new error message I have not seen before:

 

"Exception while extracting 69_campaign.zip: Uncompressed contents cross maximum permissible size of 405.52734375 KB"

 

The file is only 41526Kb in size (small) and the import routine worked perfectly BEFORE the upgrade. I can find no info on this error anywhere - help?

    This topic has been closed for replies.
    Correct answer carmenj8315827

    FIXED - for anyone else experiencing this issue, this below from Adobe Support:

     

    With the 2021 release a new setting has been added: “maxUnzipRatio” to prevent ZIP bomb attack. The UI for this will come in the next update. For time being, you can use the below java argument and allow unzip operation.

    Take a back up of jvm.config file at C:\ColdFusion2021\cfusion\bin, add the below argument and restart the ColdFusion service.

    -Dcoldfusion.zip.maxunzipratio=1024

    For example:

    java.args=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5021 -server --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED -Dcoldfusion.zip.maxunzipratio=1024 --add-opens=java.base/java.nio=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED 

     

    For the record, paid support escalated this issue within an hour and the fix was delivered within 24 hours - THANK YOU!

     

    Carmen

    2 replies

    E
    Elyse28576633fze7
    Participant
    April 23, 2023

    Wish I knew:)

    carmenj8315827
    carmenj8315827AuthorCorrect answer
    Participant
    February 9, 2021

    FIXED - for anyone else experiencing this issue, this below from Adobe Support:

     

    With the 2021 release a new setting has been added: “maxUnzipRatio” to prevent ZIP bomb attack. The UI for this will come in the next update. For time being, you can use the below java argument and allow unzip operation.

    Take a back up of jvm.config file at C:\ColdFusion2021\cfusion\bin, add the below argument and restart the ColdFusion service.

    -Dcoldfusion.zip.maxunzipratio=1024

    For example:

    java.args=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5021 -server --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED -Dcoldfusion.zip.maxunzipratio=1024 --add-opens=java.base/java.nio=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED 

     

    For the record, paid support escalated this issue within an hour and the fix was delivered within 24 hours - THANK YOU!

     

    Carmen

      Terms & ConditionsAccessibility statement
      Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices