Leslie P. Polzer
03f19aa4ea
cmSystemTools: Fix path traversal vulnerability in archive extraction
...
Add security flags to libarchive extraction to prevent path traversal
(Zip Slip) and absolute path attacks:
- ARCHIVE_EXTRACT_SECURE_NODOTDOT: Block ".." path components
- ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS: Block absolute paths
- ARCHIVE_EXTRACT_SECURE_SYMLINKS: Block symlinks escaping extract dir
This hardens both `cmake -E tar` and `file(ARCHIVE_EXTRACT)` against
malicious archives that attempt to write files outside the intended
extraction directory.
2026-01-16 08:54:07 -05:00
AJIOB
e347176424
file(ARCHIVE_CREATE): Add controls for zip and 7z compression method/level
...
Fixes : #27463
2025-12-17 14:38:30 -05:00
AJIOB
94ae247d44
cli tar: support different algorithms for zip & 7z
...
Fixes : #27443
2025-12-11 12:00:31 -05:00
AJIOB
d4d2a6a19d
cli tar: support compression level
...
Fixes #27422
2025-12-05 20:00:24 +03:00
Brad King
9149ac3f37
Merge topic 'fix-27420'
...
4fdfa0db1acbf71b21b2kwrobot@kitware.com >
Tested-by: buildbot <buildbot@kitware.com >
Merge-request: !11460
2025-12-05 09:04:58 -05:00
AJIOB
4fdfa0db1a
file(ARCHIVE_CREATE): support multithreading compression
...
Relates: #27420
2025-12-03 02:45:30 -05:00
AJIOB
5b87a5d53e
cli tar: implement LZMA support
...
Fixes : #27433
2025-12-02 10:44:49 +03:00
Yuri Witte
d8a9aabd24
file(ARCHIVE_CREATE): add WORKING_DIRECTORY option
...
Fixes : #25260
Issue: #21653
2024-09-11 09:52:32 -04:00
Brad King
dfff470d15
file(ARCHIVE*): Add test for keyword arguments with missing values
2022-06-29 17:43:41 -04:00
Asit Dhal
195d14e781
file(ARCHIVE_CREATE): Add option to control compression level
...
Fixes : #21125
2020-09-21 13:08:11 -04:00
Craig Scott
95159b7dea
file(ARCHIVE_CREATE): Rename TYPE option to COMPRESSION
...
Fixes : #20883
2020-06-27 18:38:28 +10:00
Cristian Adam
c7e1198a23
file: Add ARCHIVE_{CREATE|EXTRACT} subcommands
...
Fixes : #20443
2020-03-16 14:33:27 +01:00
Leslie P. Polzer
AJIOB
Brad King
Yuri Witte
Asit Dhal
Craig Scott
Cristian Adam