wdlkmpx / unace

The unace utility (written in C) is used for extracting, testing and viewing the contents of archives created with the ACE archiver.

UNACE

The unace utility is used for extracting, testing and viewing the contents of archives created with the ACE archiver.

Features

• v2.0 decompression
• v1.0 decompression
• decryption support

Platform compatibility

• Linux
• Windows
• FreeBSD

Compiling

• ./configure [options - see ./configure --help]
• make

unace's Issues

Security Vulnerability - unace buffer overflow vulnerability?

Does the source code for unace1 and unace address and fix the security buffer overflow vulnerability in unace?
See https://www.kb.cert.org/vuls/id/215006

If so, please consider mentioning that on your website for these two packages.

P.S. I see from git log for unace1 that you have fixed many of the security flaws. I suspect you fixed the buffer overflow flaw. But it look like you decided not to apply one security patch - 006_security-afl.patch
Please elaborate. Thanks.

Small Bug in unace1

There is a small bug in unace1.

If you extract a file from a version 1 ace archive that already exists and you enter C for cancel when asked whether you want to overwrite the file, it shows an error. See below.

$ unace1 e onefile.ace 
UNACE v1.3b    public version

Processing archive: onefile.ace

Authenticity Verification:
created on 29.5.2021 by *UNREGISTERED VERSION*


CHANGES.LOG
 Overwrite existing file? (Yes,Always,No,Cancel) c
Cancel
 Analyzing
Error occurred

P.S. I am unable to post a bug report for unace1 on your unace1 web page since your unace1 repo is read only. So I posted it here.

is theare any documentation for ACE fileformat ?

is theare any documentation for ACE fileformat ? Or did you get internal struct via reverse reverse engineering ?