A correction fix is requested for : CVE-2014-8140 unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011) The write error shows a problem in extract.c:test_compr_eb(), which was not expecting an uncompressed size of zero for an EF_NTSD extra block. Proposed changes: http://antinode.info/ftp/info-zip/unzip60/extract.c extract.c:test_compr_eb() gets a new validity test. which according to: http://www.ocert.org/advisories/ocert-2014-011.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8140
