all versions

all versions

Posted Feb 9, 2006 20:39 UTC (Thu) by roelofs (guest, #2599)
Parent article: unzip: long file name buffer overflow

... i.e., 5.52 and earlier, as demonstrated in the full-disclosure thread. Looks like it's actually the error-message buffer (reused sliding-window buffer) that's overflowing, in part because the filename is printed three times in that particular message ("foo", "foo.zip", "foo.ZIP").

Fortunately, tcsh doesn't support words that long. Bash-users are hosed, though. ;-)

Greg

---

(Log in to post comments)