Skip to content
Commit 8bf8c5ef authored by Fabian Vogt's avatar Fabian Vogt Committed by Albert Astals Cid
Browse files

Pass the ARCHIVE_EXTRACT_SECURE_SYMLINKS flag to libarchive



There are archive types which allow to first create a symlink and then
later on dereference it. If the symlink points outside of the archive,
this results in writing outside of the destination directory.

With the ARCHIVE_EXTRACT_SECURE_SYMLINKS option set, libarchive avoids
this situation by verifying that none of the target path components are
symlinks before writing.

Remove the commented out code in the method, which would actually
misbehave if enabled again.

Signed-off-by: default avatarFabian Vogt <fabian@ritter-vogt.de>
parent ddd3641e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment