]>
Commit | Line | Data |
---|---|---|
cd1a2927 MT |
1 | fix CAN-2005-1228 directory traversal bug |
2 | borrowed from fedora | |
3 | ||
4 | --- gzip-1.3.5/gzip.c.pom 2005-04-29 14:25:23.000000000 +0200 | |
5 | +++ gzip-1.3.5/gzip.c 2005-04-29 14:24:42.000000000 +0200 | |
6 | @@ -1344,6 +1344,8 @@ | |
7 | error("corrupted input -- file name too large"); | |
8 | } | |
9 | } | |
10 | + char *base2 = base_name (base); /* there should be problem with file name */ | |
11 | + strcpy(base, base2); /* in this name there can't be path */ | |
12 | /* If necessary, adapt the name to local OS conventions: */ | |
13 | if (!list) { | |
14 | MAKE_LEGAL_NAME(base); |