On Fri, 14 Mar 2014, Jonathan Nieder wrote:

> Santiago Vila wrote:
> 
> > The problem seems to disappear when disabling the fortify hardening
> > option, which is probably what I will do.
> 
> Oh dear.  I think that would be counter-productive.  Will find some
> time to track down the root cause this weekend.

Good news: The Info-Zip folks have replied to my post in the forum.
They propose the following fix:

--- a/list.c
+++ b/list.c
@@ -97,7 +97,7 @@
 {
     int do_this_file=FALSE, cfactor, error, error_in_archive=PK_COOL;
 #ifndef WINDLL
-    char sgn, cfactorstr[10];
+    char sgn, cfactorstr[12];
     int longhdr=(uO.vflag>1);
 #endif
     int date_format;


They also say the .jar file is buggy, but that's of course another
story (good behaved programs should not fail horribly when input data
is wrong).

See

http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=432&p=2670#p2670

for details.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to