emo/xbps
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #248 from ebfe/abspath

Browse Source 
lib/package_unpack.c: refuse to unpack to absolute paths
This commit is contained in:
Juan RP 2017-10-25 09:18:47 +02:00 committed by GitHub
commit 512d39d591
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -40,7 +40,7 @@ To build this you'll need:
- [pkg-config](http://www.freedesktop.org/wiki/Software/pkg-config/)
- [zlib](http://www.zlib.net)
- [openssl](http://www.openssl.org)
- [libarchive >= 2.8.0](http://www.libarchive.org)
- [libarchive >= 3.2.0](http://www.libarchive.org)
and optionally:

1
include/xbps_api_impl.h
View File

@ -47,6 +47,7 @@
#define EXTRACT_FLAGS ARCHIVE_EXTRACT_SECURE_NODOTDOT | \
ARCHIVE_EXTRACT_SECURE_SYMLINKS | \
ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS | \
ARCHIVE_EXTRACT_TIME | ARCHIVE_EXTRACT_PERM | \
ARCHIVE_EXTRACT_UNLINK
#define FEXTRACT_FLAGS ARCHIVE_EXTRACT_OWNER | EXTRACT_FLAGS