Hello,
in the patch below, 3 possible bugs in ZIP30 are described.
The first one deals with small string buffer (fix is in the patch).
The second one deals with unchecked return value of zftello() function
* The third one deals with possibility of NULL pointer dereference.
Since I am not familiar enough with the zip source code, the 2nd and 3rd problems are only mentioned in the patch but not fixed.
Thanks,
JM