src/patches/gzip-1.3.5-gunzip-dir.patch

   1 fix CAN-2005-1228 directory traversal bug
   2 borrowed from fedora
   3
   4 --- gzip-1.3.5/gzip.c.pom       2005-04-29 14:25:23.000000000 +0200
   5 +++ gzip-1.3.5/gzip.c   2005-04-29 14:24:42.000000000 +0200
   6 @@ -1344,6 +1344,8 @@
   7                         error("corrupted input -- file name too large");
   8                     }
   9                 }
  10 +               char *base2 = base_name (base);   /* there should be problem with file name */
  11 +               strcpy(base, base2);              /* in this name there can't be path */
  12                  /* If necessary, adapt the name to local OS conventions: */
  13                  if (!list) {
  14                     MAKE_LEGAL_NAME(base);