Re: zoo: directory traversal security bug

[Jose Carlos do Nascimento <josecarlos.nascimento@varig.com>]

Hi, Nigel

finally one good answer :)

I tried to find upstream author of zoo,,  but I didnt find his email.
I know a little bit of C,  and my Boss know C very well,  them, I will 
try to solve this problem with him.

Thanks
[]
Jose Carlos


> On 14/07/05, Jose Carlos do Nascimento <josecarlos.nascimento@varig.com> wrote:
>  
>
> > Hi, All
> >
> > I'm mantainer of zoo package and I need help to solve this bug:
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309594
> >    
>
> Have you considered looking at how gzip, zip, unzip, tar, ... handle
> this stuff?  You may be able to find a quick and easy solution there. 
> (hint: these codes are most likely highly commented, so try finding
> stuff like 'traversal' '../../.' etc...)
>
>  
>
> > I dont know C  :(
> >
> > I would be very grateful if someone could help me.
> >
> > Thanks
> > Jose Carlos
> >
> >