[Zlib-devel] Bug in zlib 1.2.1 -- please test zlib 1.2.1.1 forimminent release!

Gilles Vollant info at winimage.com
Thu Jan 15 19:10:00 EST 2004


To known how dangerous was the bug, have you an idea of the risk (%) to
found this problem in a real life zipfile?

Pehaps it can be useful to write a test program that try unzip (in memory)
all zipfile (and pehaps .gz also) of an hard disk, using zLib.
All reader of this list have probably hundreds of zipfile on hard disk. The
CRC32 value stored in the zipfile directory help known if there is a
problem.

-----Original Message-----
From: Zlib-devel-bounces at zlib.net [mailto:Zlib-devel-bounces at zlib.net] On
Behalf Of Mark Adler
Sent: Friday, January 09, 2004 12:34 PM
To: zlib-devel at zlib.net
Subject: [Zlib-devel] Bug in zlib 1.2.1 -- please test zlib 1.2.1.1
forimminent release!

All,

A zip file was found that zlib 1.2.1 could not properly inflate, but
previous versions could (as well as various other versions of my inflate
code).  Oops.  I have fixed the bug, and a new version is now available
here:

     http://www.alumni.caltech.edu/~madler/zlib-1.2.1.1.tar.gz

Please test this version.  The only source change is in inftrees.c, which
fixes a problem with dynamic blocks that have no distance codes.

mark







More information about the Zlib-devel mailing list