diff options
| author | gaoyukun <[email protected]> | 2026-08-06 12:46:32 +0800 |
|---|---|---|
| committer | Victor Kareh <[email protected]> | 2026-08-08 11:56:43 +0000 |
| commit | f8b49310898c7c011d4be14335e0c59558b478d5 (patch) | |
| tree | 46724f63a838c85242a74cadd0e56781ffcd960c /help/et | |
| parent | c4b90ec015b82e2b85d9e5f5d2ea3486a7936c8b (diff) | |
| download | engrampa-master.tar.bz2 engrampa-master.tar.xz | |
Add a test script that verifies the cpio extraction path traversal
fix (--no-absolute-filenames) in both fr-command-cpio.c and
fr-command-rpm.c:
- static check: both extraction commands must carry the flag
- dynamic check: crafted cpio payloads with absolute-path and ../
entries must stay inside the extraction directory
- rpm2cpio | cpio pipeline extracts a normal RPM without regression
Run the test as part of the CI build (autotools check stage).
Co-Authored-By: AtomCode (deepseek-v4-flash) <[email protected]>
Diffstat (limited to 'help/et')
0 files changed, 0 insertions, 0 deletions