Anand Avati hit an integer overflow problem in our unzip code.

diff --git a/archival/libunarchive/decompress_unzip.c b/archival/libunarchive/decompress_unzip.c
index 3d03643395d7e2cea5a35eeffe6f299e8d5a4699..0a199dd9f0597ba16c824715ec25f3c4e938ed57 100644 (file)
--- a/archival/libunarchive/decompress_unzip.c
+++ b/archival/libunarchive/decompress_unzip.c
@@ -956,7 +956,7 @@ extern int inflate_unzip(int in, int out)
 extern int inflate_gunzip(int in, int out)
 {
        unsigned int stored_crc = 0;
-       unsigned char count;
+       unsigned int count;
 
        inflate_unzip(in, out);