CVS commit: [netbsd-7] src

["Soren Jacobsen" <snj%netbsd.org@localhost>]

Module Name:    src
Committed By:   snj
Date:           Sat Feb 28 07:59:22 UTC 2015

Modified Files:
        src/external/zlib/pigz/dist [netbsd-7]: pigz.c
        src/usr.bin/gzip [netbsd-7]: gzip.1 gzip.c

Log Message:
Pull up following revision(s) (requested by mrg in ticket #557):
        external/zlib/pigz/dist/pigz.c: revision 1.2
        usr.bin/gzip/gzip.1: revision 1.24
        usr.bin/gzip/gzip.c: revision 1.107
merge https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f:
When decompressing with -N or -NT, strip any path from header name.
This uses the path of the compressed file combined with the name
from the header as the name of the decompressed output file.  Any
path information in the header name is stripped.  This avoids a
possible vulnerability where absolute or descending paths are put
in the gzip header.
--
do not use directory paths present in gzip files with the -N flag,
similar to the problem reported in pigz.


To generate a diff of this commit:
cvs rdiff -u -r1.1.1.2 -r1.1.1.2.2.1 src/external/zlib/pigz/dist/pigz.c
cvs rdiff -u -r1.23 -r1.23.4.1 src/usr.bin/gzip/gzip.1
cvs rdiff -u -r1.105 -r1.105.20.1 src/usr.bin/gzip/gzip.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.