Improve support for safe symlink extraction#763

Closed

AndrewFasano wants to merge 7 commits intoonekey-sec:mainfrom rehosting:symlink_fixes

+147-84

Commits on Feb 13, 2024

Rewrite symlink sanitization logic

Andrew Fasano
authored and
qkaiser
committed
Bugfix: Symlink destination is influenced by source path

Andrew Fasano
authored and
qkaiser
committed
Bugfixes for backwards symlink creation and backwards CPIO extractor symlink creation

Andrew Fasano
authored and
qkaiser
committed
Bugfix in create_symlink: convert destination, not source to relative paths

Andrew Fasano
authored and
qkaiser
committed
Bugfix: Check symlink safety relative to link name in tarfile extraction

Andrew Fasano
authored and
qkaiser
committed
Bugfix: for absolute links in tarfile extraction

Andrew Fasano
authored and
qkaiser
committed
Safe_tarfile: make paths safe during extraction

Andrew Fasano
authored and
qkaiser
committed