http://cvs.savannah.gnu.org/viewvc/fastjar/jartool.c?root=fastjar&r1=1.59&r2=1.60&view=patch

2010-03-01  Richard Guenther  <rguenther@suse.de>

	* jartool.c (read_entries): Properly zero-terminate filename.

--- a/jartool.c	2009/09/06 22:16:00	1.59
+++ b/jartool.c	2010/03/01 15:38:43	1.60
@@ -790,6 +790,7 @@
 		   progname, jarfile);
 	  return 1;
 	}
+      ze->filename[len] = '\0';
       len = UNPACK_UB4(header, CEN_EFLEN);
       len += UNPACK_UB4(header, CEN_COMLEN);
       if (lseek (fd, len, SEEK_CUR) == -1)
