>Number:         26233
>Category:       bin
>Synopsis:       gzip(1) doesn't check crc or input length
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jul 10 18:30:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
>Release:        NetBSD 2.0F
>Organization:

>Environment:
	
	
System: NetBSD kaeru 2.0F NetBSD 2.0F (build.kaeru) #1518: Thu Jul 8 16:09:03 JST 2004 takashi@kaeru:/home/takashi/work/kernel/build.kaeru i386
Architecture: i386
Machine: i386
>Description:
	when extracting .gz files, gzip(1) doesn't check crc or input length.
>How-To-Repeat:
	- run "gzip -t" on .gz files with last 8 bytes
	  (which contains crc and uncompressed length) corrupted or truncated.
	- run "gzip -t" on files with tailing garbage.
	  (gnu gzip prints a warning in this case.
	  for a detail, see "CAVEATS" in their manpage.)
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: