[23656] in bugtraq
gzip bug w/ patch..
daemon@ATHENA.MIT.EDU (greg)
Sun Dec 30 20:46:12 2001
Message-ID: <001901c1913d$edb9e4a0$3fdaf30c@c534987-a.attbi.com>
From: "greg" <gregn@dekode.org>
To: <bugtraq@securityfocus.com>
Date: Sun, 30 Dec 2001 14:26:10 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016_01C1913D.ED339DA0"
------=_NextPart_000_0016_01C1913D.ED339DA0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Earlier, Goobles had pointed out a bug in Gzip pertaining to this code in
(gzip.c):
if (len + NLENGTH(dp) + 1 < MAX_PATH_LEN - 1) {
strcpy(nbuf,dir);
if (len != 0 /* dir = "" means current dir on Amiga */
#ifdef PATH_SEP2
while looking through I have found that the real problem lied here in
(gzip.c):
line 1009:
strcpy(ifname, iname);
well anyway, there is an attached patch, bye.
------=_NextPart_000_0016_01C1913D.ED339DA0
Content-Type: application/octet-stream;
name="gzip.patch"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="gzip.patch"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------=_NextPart_000_0016_01C1913D.ED339DA0--
