Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Backports:SLE-15-SP4:FactoryCandidates
deepin-compressor
fix-Zip-Path-Traversal.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File fix-Zip-Path-Traversal.patch of Package deepin-compressor
diff -Nur deepin-compressor-5.12.13/3rdparty/libzipplugin/libzipplugin.cpp deepin-compressor-5.12.13-new/3rdparty/libzipplugin/libzipplugin.cpp --- deepin-compressor-5.12.13/3rdparty/libzipplugin/libzipplugin.cpp 2022-12-28 13:50:00.000000000 +0800 +++ deepin-compressor-5.12.13-new/3rdparty/libzipplugin/libzipplugin.cpp 2023-12-28 20:41:04.137085065 +0800 @@ -741,6 +741,11 @@ } strFileName = m_common->trans2uft8(statBuffer.name, m_mapFileCode[index]); // 解压文件名（压缩包中） + //fix 232873 + if(strFileName.indexOf("../") != -1) { + qInfo() << "skipped ../ path component(s) in " << strFileName; + strFileName = strFileName.replace("../", ""); + } QString strOriginName = strFileName; // 针对文件夹名称过长的情况，直接提示解压失败，文件夹名称过长
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
