#1609 File names become unencrypted when adding to archive

[Stuart Heinrich]

Steps to reproduce:
1) Create a new archive with password protection and option "Encrypt file names checked."
2) Open archive and enter password
3) Drag and drop a new file into the archive
4) Close archive
5) Open archive and observe that all filenames contained in the archive are displayed before entering password

In a context where it is necessary to maintain an archive having encrypted file name contents, and where new items must be regularly added, this means the user must actually recreate the archive from scratch each time a new file is added.

The fundamental problem seems to be that when adding files to an existing archive (which requires re-encryption), the archive is re-encrypted using different options than were originally selected during the creation of the archive. The user is not even notified of the potential changes in encryption.

Obviously the "encrypt file names" option is lost -- but perhaps other options are lost as well without user knowledge? Perhaps the method of encryption is changed or weakened? This could potentially be a security vulnerability.

[Igor Pavlov]

What version of 7-Zip did you check it?

[Stuart Heinrich]

Happens with both 9.2 and the latest (15.14) versions on Windows

[Igor Pavlov]

I suppose it's fixed in 7-Zip 15.14.
Remove 9.20 version. install 15.14 and check it again.
IAnd describe all clicks to reproduce the problem with 7-Zip 15.14.

[Stuart Heinrich]

As i just said, this is a bug wIth 15.14. I am already using 15.14...

[Igor Pavlov]

These things were fixed after 9.20.
Probably you thought that you used 15.14, but actually you could use 9.20.
Check it again with 15.14.
And look "About" window about version number.
If you think that there is problem still, please describe ALL clicks to reproduce the problem.

[egrof]

Hello Igor,
today, I stumbled upon the same problem with the most recent 7-Zip-Version (16.04 64-Bit Windows)

I can reproduce it as follows (I guess, the dummy files should not be empty)

1. Filesystem: Create a directory e.g. "aFolder" and put a file "dummy1.txt" in it
2. 7-Zip: Create an encrypted Zip-Archive "aFolder.zip" from the folder "aFolder"
3. Filesystem: Create another file "dummy2.txt"
4. 7-Zip: Open "aFolder.zip", go to the directory "aFolder" and drop "dummy2.txt": The file will be added to "aFolder.zip\aFolder" (without asking for a password)
5. 7-Zip: Check the properties of the dummy-files in "aFolder.zip\aFolder": "dummy1.txt" is shown as encrypted ("+"), while "dummy2.txt" is not encrypted ("-")

The expected behavior is: Dropping a (new) file should ask for the password and add the file encrypted to the archive.

Thanks for checking and hopefully fixing this bug. :-)

BTW: Thanks a lot for 7-zip!

[fresheneesz]

I also have this problem. Its been a problem for years.