mirror of
https://gitlab.kitware.com/cmake/cmake.git
synced 2026-09-25 04:09:36 +03:00
Leslie P. Polzer
03f19aa4ea
Add security flags to libarchive extraction to prevent path traversal (Zip Slip) and absolute path attacks: - ARCHIVE_EXTRACT_SECURE_NODOTDOT: Block ".." path components - ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS: Block absolute paths - ARCHIVE_EXTRACT_SECURE_SYMLINKS: Block symlinks escaping extract dir This hardens both `cmake -E tar` and `file(ARCHIVE_EXTRACT)` against malicious archives that attempt to write files outside the intended extraction directory.
11 lines
371 B
Plaintext
11 lines
371 B
Plaintext
^CMake Error: Problem with archive_write_header\(\): Path is absolute
|
|
CMake Error: Current file:
|
|
[^
|
|
]*/Tests/RunCMake/File_Archive/path-absolute-build/SHOULD_NOT_EXIST_ABS\.txt
|
|
CMake Error at [^
|
|
]*/Tests/RunCMake/File_Archive/path-absolute\.cmake:[0-9]+ \(file\):
|
|
file failed to extract:
|
|
|
|
[^
|
|
]*/Tests/RunCMake/File_Archive/path-absolute-build/malicious_abs\.tar$
|