xz

I was able to confirm that os.Create() will happily follow symlinks.

Although standard tools like tar will not likely allow you to add two files with the same name to an archive file, it's certainly easy enough to do in code. This means that we need to add an additional check before writing to a destination to make sure that it's not a symlink outside of the destination.

The vulnerab

xz

Here are 65 public repositories matching this topic...

mholt / archiver

[sec] check if symlink points outside of destination directory

Why did Compress and Uncompress disappear?

Add ByHeader support to all formats

libarchive / libarchive

adamhathcock / sharpcompress

nmoinvaz / minizip

ulikunitz / xz

tsolomko / SWCompression

xz-mirror / xz

c4milo / unpackit

Quintus / ruby-xz

lfuelling / lrkFM

bbqsrc / box

pbatard / bled

naqvis / xz.cr

dhondta / recursive-compression

weinholt / compression

turbolocust / GZipper

mickep76 / compress

ied206 / Joveler.Compression

codemasher / php-ext-xz

dscalzi / ZipExtractor

last-stand / java-algorithms-usage

pmqs / IO-Compress-Lzma

tumdum / snapshot_fs

frithnanth / perl6-Archive-Libarchive-Raw

gekomad / scala-compress

green-green-avk / build-libarchive-minitar-android

ascoderu / compression-benchmarks

Parallelize execution

paulcager / aio

frithnanth / perl6-Archive-Libarchive

xz-mirror / xz-mirror

Improve this page

Add this topic to your repo

xz