Name: krC82822 Date: 11/27/2000


java version "1.3beta" (and merlin-beta)
Java(TM) 2 Runtime Environment, Standard Edition (build randy-000811-12:17)
Classic VM (build randy-000811-12:17, native threads, sunwjit)

in ZIP_ReadEntry, after the call to InflateFully, there is a check if *msg == 0,
however it is possible for msg to be NULL, so *msg SEGV's. The check should then
be (msg==0 || *msg==0) (if *msg is even required.) The other possible solution
would be to make sure that all failure cases of InflateFully set *msg.

TEST CASE:
Run in a limited memory model where memory runs out in inflate_blocks_new.

-------------------------------

17 Nov 2000, eval1127@eng -- since msg (apparently) only set to non-NULL
if there's a ZIP error, it DOES appear possible that msg can be NULL
and, therefore, the user's suggested check should be added.
(user's suggested fix, and current merlin source excerpts,
 included in Comments section)

(Review ID: 109025)
======================================================================