Now this is a case for sandboxing.  A decompressor has one input file and one output directory.  It should not have the power to change any state outside those files.<p>A key point here is that not all code needs to be secure. Some code just needs to be kept in a box.