diff options
| author | zeertzjq <zeertzjq@outlook.com> | 2026-04-16 08:40:41 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-04-16 08:40:41 +0800 |
| commit | c3c06723f01de2ff2cb3edfe1896adb05b5921ee (patch) | |
| tree | e7eaed094bd974aa377e51517cd7332d0ad0b9c8 /test/functional/vimscript/executable_spec.lua | |
| parent | 56ed27d7181a479a03ffb4a3012d9a460191074f (diff) | |
vim-patch:9.2.0355: runtime(tar): missing path traversal checks in tar#Extract() (#39095)
Problem: runtime(tar): missing path traversal checks in tar#Extract()
Solution: Add check for leading slash, however gnu tar should already
detect this (q1uf3ng)
tar#Extract() did not check for ../ sequences or absolute paths,
unlike zip#Extract() which was patched in recent commits. Add the
same checks: ../ (relative traversal), leading slash (Unix), drive
letter and UNC/leading slash (Windows).
closes: vim/vim#19981
https://github.com/vim/vim/commit/490b737f3e172c3c66744c7531ee85f19618419d
Co-authored-by: q1uf3ng <q1uf3ng@protone.me>
Diffstat (limited to 'test/functional/vimscript/executable_spec.lua')
0 files changed, 0 insertions, 0 deletions