archive/zip: malformed archive may cause panic or memory exhaustion [1.16 backport]

[gopherbot]

@rolandshoemaker requested issue #46242 to be considered for backport to the next 1.16 minor release.

@gopherbot please consider this for backport to 1.15 and 1.16 as this is a security issue.

[gopherbot]

Change https://golang.org/cl/322909 mentions this issue: [release-branch.go1.16] archive/zip: only preallocate File slice if reasonably sized

[mknyszek]

A security issue with no workaround because it's in a library detail. Approved.

[gopherbot]

Closed by merging 895fb1b to release-branch.go1.16.