Denys Vlasenko bc9bbeb2b8 libarchive: do not extract unsafe symlinks unless $EXTRACT_UNSAFE_SYMLINKS=1 ...

function                                             old     new   delta
unsafe_symlink_target                                  -     147    +147
unzip_main                                          2711    2732     +21
copy_file                                           1657    1678     +21
tar_main                                             999     971     -28
data_extract_all                                    1038     984     -54
------------------------------------------------------------------------------
(add/remove: 2/0 grow/shrink: 2/2 up/down: 189/-82)           Total: 107 bytes

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

2017-08-10 11:52:42 +02:00

..

libcoreutils

…

basename.c

…

cat.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

chgrp.c

…

chmod.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

chown.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

chroot.c

make 17 state-changing execing applets (ex: "nice PROG ARGS") noexec

2017-08-04 19:55:01 +02:00

cksum.c

sv,svc: fix NOEXEC fallout

2017-08-06 21:23:03 +02:00

comm.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

Config.src

…

cp.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

cut.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

date.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

dd.c

…

df.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

dirname.c

…

dos2unix.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

du.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

echo.c

…

env.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

expand.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

expr.c

expr: make it NOEXEC

2017-08-07 23:23:18 +02:00

factor.c

…

false.c

…

fold.c

…

fsync.c

…

head.c

…

hostid.c

…

id_test.sh

…

id.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

install.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

Kbuild.src

…

link.c

libarchive: do not extract unsafe symlinks unless $EXTRACT_UNSAFE_SYMLINKS=1

2017-08-10 11:52:42 +02:00

ln.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

logname.c

…

ls.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

md5_sha1_sum.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

mkdir.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

mkfifo.c

…

mknod.c

…

mktemp.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

mv.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

nice.c

make 17 state-changing execing applets (ex: "nice PROG ARGS") noexec

2017-08-04 19:55:01 +02:00

nl.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

nohup.c

make 17 state-changing execing applets (ex: "nice PROG ARGS") noexec

2017-08-04 19:55:01 +02:00

nproc.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

od_bloaty.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

od.c

…

paste.c

…

printenv.c

…

printf.c

…

pwd.c

…

readlink.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

realpath.c

…

rm.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

rmdir.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

seq.c

…

shred.c

…

shuf.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

sleep.c

…

sort.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

split.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

stat.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

stty.c

sv,svc: fix NOEXEC fallout

2017-08-06 21:23:03 +02:00

sum.c

…

sync.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

tac.c

…

tail.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

tee.c

…

test_ptr_hack.c

…

test.c

…

timeout.c

…

touch.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

tr.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

true.c

…

truncate.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

tty.c

…

uname.c

getopt32: remove applet_long_options

2017-08-08 17:09:40 +02:00

uniq.c

…

unlink.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

usleep.c

…

uudecode.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

uuencode.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

wc.c

…

who.c

getopt32: remove opt_complementary

2017-08-08 21:55:02 +02:00

whoami.c

…

yes.c

…