Re: [hackers] [sbase] tar: fix bug when extracting a tarball created using '.' as base path

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

From: Nick <suckless-hackers_AT_njw.name>
Date: Sat, 6 Jun 2015 10:56:16 +0100

Quoth Dimitris Papastamos:
> Would you mind posting any dependent patches as well? I think I've done
> something stupid and lost the thread.

Sure, I've attached this patch and the previous one.

I have one more patch planned, to refuse to create files that use
created symlinks in their path, but I haven't written that yet, and
these are still welcome improvements without it.

Nick

text/x-diff attachment: 0001-Strip-dangerous-path-traversal-stuff-from-paths.patch

text/x-diff attachment: 0002-Strip-leading-.-from-path-names-and-don-t-try-to-ext.patch

application/pgp-signature attachment: Digital signature

Received on Sat Jun 06 2015 - 11:56:16 CEST

This archive was generated by hypermail 2.3.0 : Thu Jun 18 2015 - 17:36:16 CEST