|
Add a test script that verifies the cpio extraction path traversal
fix (--no-absolute-filenames) in both fr-command-cpio.c and
fr-command-rpm.c:
- static check: both extraction commands must carry the flag
- dynamic check: crafted cpio payloads with absolute-path and ../
entries must stay inside the extraction directory
- rpm2cpio | cpio pipeline extracts a normal RPM without regression
Run the test as part of the CI build (autotools check stage).
Co-Authored-By: AtomCode (deepseek-v4-flash) <[email protected]>
|
