Skip to content

fix: do not create directories outside #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 24, 2021
Merged

Conversation

dignifiedquire
Copy link
Owner

ports alexcrichton/tar-rs#259

Closes #23

TODO: fix now failing test

@dignifiedquire dignifiedquire merged commit 9e61431 into master Aug 24, 2021
@dignifiedquire dignifiedquire deleted the fix-outside-dir branch August 24, 2021 08:55
charliermarsh added a commit to astral-sh/tokio-tar that referenced this pull request Feb 2, 2025
## Summary

This is a port of alexcrichton/tar-rs#259 which was later ported to `async-tar` in dignifiedquire/async-tar#24. The goal is to avoid allowing archives to create directories outside of the target path by deferring the creation of directories.

## Test Plan

`cargo test`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

async-tar may be exposed to RUSTSEC-2021-0080: Links in archive can create arbitrary directories
1 participant