(no subject)

Hello. dear Info-Zip community

UnZip, version 5.51c BETA, 13 May 2003

The source archive is available at:
     http://home.t-online.de/home/christian.spieler/infozip/unz551c.zip

Sorry for not transfering the file to ftp.info-zip.org, but unfortunately
I have again forgotten the password of my maintance account on LEO...

Now, the changes:

The major modifications of this beta are

a) a security bug fix regarding the "parent dir traversal" detection

b) finished up the WinCE port. It is now finished in so far that it
   compiles without errors, but it needs testing of the binaries on
   "real" devices.

Features added (or removed):

5.51c (13 May 03):
 - WinCE command line tool integration is (almost) finished: project file is
    cleaned up and works with VC-embedded 3.0; port needs testing... [SPC]

Bugs fixed:

5.51c (13 May 03):
 - OS2, WIN32, WinCE: '\\' chars are not allowed in file names, map them to
'_'
    to prevent misinterpreting them as directory separators [David F, SPC]
 - windll, VB example: updated integration of "Open file" common dialog and
    added special Readme text to document installation and maintance issues
    of the VB example code [ED, SPC]
 - unzpriv.h: enclosed shift op expressions in definitions of MPN_xxx macro
    constant with parentheses (for safety) [Cosmin Truta]
 - win32/win32.c: fixed bugs in set_direc_attribs(), do not try to set
dirtimes
    on Win9x systems [Cosmin Truta]
 - SET_DIR_ATTRIBS option: changed defer_dir_attribs() function interface to
    allow non-error return without deferred direntry data [SPC]
 - BeOS, Theos: updated SET_DIR_ATTRIBS code to work with the revised
generic
    code [SPC]
 - WinCE port: revitalized WinCE port code, updated VC project files, added
    "VC embedded Tools 3.0" project file [SPC]
 - unzip.h: added rule to define UNIX flag for NetBSD [Ray Phillips]
 - unix/Makefile: added "-DUNIX" to default CF settings, to get rid of misc
    problems concerning auto-detection of a "Unix" environment [SPC]
 - LICENSE: include SFXWiz in the exeption clause concerning distribution
    of self-extracting archives [Greg Roelofs]
 - Amiga, AosVS, Atari, BeOS, FlexOS, Human68K, MacOS, MSDOS, Novell, OS/2,
    Unix, Win32, (Theos, WinCE - only code sync, no bug to fix):
    fixed hole in directory traversal security code which did not recognize
    "../" when path component contained some control character which was
    silently skipped ["jelmer", SPC]
==================

Before a release of 5.51, I want to finish up another issue:
The NTFS-SD extra field code should be integrated into the new functionality
for deferred setting of directory attributes. This should result in a
structural cleanup of the NTSD code and (finally) make this piece of
the WIN32 port multithreading-safe.

Feel free to test the code and send back comments.

Best regards,

Christian Spieler