Projects
Eulaceura:Mainline
mono
_service:obs_scm:mono-5.18.0-sharpziplib-parent...
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _service:obs_scm:mono-5.18.0-sharpziplib-parent-path-traversal.patch of Package mono
--- a/mcs/class/ICSharpCode.SharpZipLib/ICSharpCode.SharpZipLib/Zip/FastZip.cs 2019-02-21 05:54:25.493666036 +0000 +++ b/mcs/class/ICSharpCode.SharpZipLib/ICSharpCode.SharpZipLib/Zip/FastZip.cs 2019-02-21 05:55:01.494273426 +0000 @@ -375,7 +375,8 @@ targetName = Path.Combine(targetDirectory, entryFileName); dirName = Path.GetDirectoryName(Path.GetFullPath(targetName)); - + if (!Path.GetFullPath(targetName).StartsWith(targetDirectory, StringComparison.InvariantCultureIgnoreCase)) + throw new ZipException("Parent traversal in paths is not allowed"); doExtraction = doExtraction && (entryFileName.Length > 0); }
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.
浙ICP备2022010568号-2