gzipÊÇGNU zipµÄËõд£¬gzip½âѹѹËõÊÇÒ»¸öGNU×ÔÓÉÈí¼þµÄÎļþѹËõ³ÌÐò£¬Ò²¾­³£ÓÃÀ´±íʾgzipÕâÖÖÎļþ¸ñʽ¡£ Èí¼þµÄ×÷ÕßÊÇJean-loup GaillyºÍMark Adler¡£

gzip¹¦ÄÜÌص㣺

gzipÊÇGNU zipµÄËõд£¬ËüÊÇÒ»¸öGNU×ÔÓÉÈí¼þµÄÎļþѹËõ³ÌÐò£¬Ò²¾­³£ÓÃÀ´±íʾgzipÕâÖÖÎļþ¸ñʽ¡£Èí¼þµÄ×÷ÕßÊÇJean-loup GaillyºÍMark Adler¡£1992Äê10ÔÂ31ÈÕµÚÒ»´Î¹«¿ª·¢²¼£¬°æ±¾ºÅÊÇ0.1¡£

ChangeLog:

Bug fixes£º

gzip -d could segfault and/or clobber the stack, possibly leading to

arbitrary code execution. This affects x86_64 but not 32-bit systems.

This fixes CVE-2010-0001.

gzip -d would fail with a CRC error for some valid inputs.

So far, the only valid input known to exhibit this failure was

compressed "from FAT filesystem (MS-DOS, OS/2, NT)". In addition,

to trigger the failure, your memcpy implementation must copy in

the "reverse" order.