Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:netway:mono58
mono
mono-5.18.0-sharpziplib-parent-path-traversal.p...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File mono-5.18.0-sharpziplib-parent-path-traversal.patch of Package mono
--- a/mcs/class/ICSharpCode.SharpZipLib/ICSharpCode.SharpZipLib/Zip/FastZip.cs 2019-02-21 05:54:25.493666036 +0000 +++ b/mcs/class/ICSharpCode.SharpZipLib/ICSharpCode.SharpZipLib/Zip/FastZip.cs 2019-02-21 05:55:01.494273426 +0000 @@ -375,7 +375,8 @@ targetName = Path.Combine(targetDirectory, entryFileName); dirName = Path.GetDirectoryName(Path.GetFullPath(targetName)); - + if (!Path.GetFullPath(targetName).StartsWith(targetDirectory, StringComparison.InvariantCultureIgnoreCase)) + throw new ZipException("Parent traversal in paths is not allowed"); doExtraction = doExtraction && (entryFileName.Length > 0); }
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
