Skip to content
  • Fabian Vogt's avatar
    Pass the ARCHIVE_EXTRACT_SECURE_SYMLINKS flag to libarchive · 8bf8c5ef
    Fabian Vogt authored and Albert Astals Cid's avatar Albert Astals Cid committed
    
    
    There are archive types which allow to first create a symlink and then
    later on dereference it. If the symlink points outside of the archive,
    this results in writing outside of the destination directory.
    
    With the ARCHIVE_EXTRACT_SECURE_SYMLINKS option set, libarchive avoids
    this situation by verifying that none of the target path components are
    symlinks before writing.
    
    Remove the commented out code in the method, which would actually
    misbehave if enabled again.
    
    Signed-off-by: default avatarFabian Vogt <fabian@ritter-vogt.de>
    8bf8c5ef