Anand Avati hit an integer overflow problem in our unzip code.

diff --git a/archival/libunarchive/decompress_unzip.c b/archival/libunarchive/decompress_unzip.c
index 3d03643..0a199dd 100644 (file)
--- a/archival/libunarchive/decompress_unzip.c
+++ b/archival/libunarchive/decompress_unzip.c
@@ -956,7 +956,7 @@ extern int inflate_unzip(int in, int out)
 extern int inflate_gunzip(int in, int out)
 {
        unsigned int stored_crc = 0;
-       unsigned char count;
+       unsigned int count;
 
        inflate_unzip(in, out);