lib/package_unpack.c: refuse to unpack to absolute paths

This commit is contained in:
Michael Gehring 2017-07-13 07:56:47 +00:00
parent 66c6331689
commit a2aec39d74
2 changed files with 2 additions and 1 deletions

View File

@ -40,7 +40,7 @@ To build this you'll need:
- [pkg-config](http://www.freedesktop.org/wiki/Software/pkg-config/)
- [zlib](http://www.zlib.net)
- [openssl](http://www.openssl.org)
- [libarchive >= 2.8.0](http://www.libarchive.org)
- [libarchive >= 3.2.0](http://www.libarchive.org)
and optionally:

View File

@ -47,6 +47,7 @@
#define EXTRACT_FLAGS ARCHIVE_EXTRACT_SECURE_NODOTDOT | \
ARCHIVE_EXTRACT_SECURE_SYMLINKS | \
ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS | \
ARCHIVE_EXTRACT_TIME | ARCHIVE_EXTRACT_PERM | \
ARCHIVE_EXTRACT_UNLINK
#define FEXTRACT_FLAGS ARCHIVE_EXTRACT_OWNER | EXTRACT_FLAGS