gzip bug w/ patch..

From: greg (gregn@dekode.org)
Date: 12/30/01


From: "greg" <gregn@dekode.org>
To: <bugtraq@securityfocus.com>
Date: Sun, 30 Dec 2001 14:26:10 -0000


Earlier, Goobles had pointed out a bug in Gzip pertaining to this code in
(gzip.c):

 if (len + NLENGTH(dp) + 1 < MAX_PATH_LEN - 1) {
            strcpy(nbuf,dir);
            if (len != 0 /* dir = "" means current dir on Amiga */
#ifdef PATH_SEP2

while looking through I have found that the real problem lied here in
(gzip.c):

line 1009:

    strcpy(ifname, iname);

well anyway, there is an attached patch, bye.