busybox.git/testsuite/cpio.tests, branch master Unnamed repository; edit this file 'description' to name the repository. archival: disallow path traversals (CVE-2023-39810) 2025-04-16T01:03:17+00:00 Denys Vlasenko vda.linux@googlemail.com 2024-10-02T08:12:05+00:00 9a8796436b9b0641e13480811902ea2ac57881d3 Create new configure option for archival/libarchive based extractions to disallow path traversals. As this is a paranoid option and might introduce backward incompatibility, default it to no. Fixes: CVE-2023-39810 Based on the patch by Peter Kaestle <peter.kaestle@nokia.com> function old new delta data_extract_all 921 945 +24 strip_unsafe_prefix 101 102 +1 ------------------------------------------------------------------------------ (add/remove: 0/0 grow/shrink: 2/0 up/down: 25/0) Total: 25 bytes Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Create new configure option for archival/libarchive based extractions to
disallow path traversals.
As this is a paranoid option and might introduce backward
incompatibility, default it to no.

Fixes: CVE-2023-39810

Based on the patch by Peter Kaestle <peter.kaestle@nokia.com>

function                                             old     new   delta
data_extract_all                                     921     945     +24
strip_unsafe_prefix                                  101     102      +1
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 25/0)               Total: 25 bytes

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
randomconfig fixes 2020-06-23T19:28:19+00:00 Denys Vlasenko vda.linux@googlemail.com 2020-06-23T19:28:19+00:00 5fa5c4bde8b9ab75fa0ed37ee2fafca3fd46288a Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
randomconfig fixes 2016-12-12T08:26:16+00:00 Denys Vlasenko vda.linux@googlemail.com 2016-12-12T08:26:16+00:00 52ae0980112f57bbdf4590f649432264d00cc943 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
cpio: add ownership (-R) test cases 2016-11-04T21:32:46+00:00 Aaro Koskinen aaro.koskinen@iki.fi 2016-11-02T22:25:05+00:00 46443a383cdd977d3b7644ffdac8041fa55e51da Add ownership (-R) test cases. Signed-off-by: Aaro Koskinen <aaro.koskinen@iki.fi> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Add ownership (-R) test cases.

Signed-off-by: Aaro Koskinen <aaro.koskinen@iki.fi>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
cpio: avoid 'not created: newer or same age file exists' message for dirs 2010-10-17T22:54:51+00:00 Pascal Bellard pascal.bellard@ads-lu.com 2010-10-17T22:54:51+00:00 873bb31d1703aae080d1928b5928c0011a944485 Signed-off-by: Pascal Bellard <pascal.bellard@ads-lu.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Pascal Bellard <pascal.bellard@ads-lu.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
*: make GNU licensing statement forms more regular 2010-08-16T18:14:46+00:00 Denys Vlasenko vda.linux@googlemail.com 2010-08-16T18:14:46+00:00 0ef64bdb40c54681e8dd5ab8df42ac88e4ab1d4a This change retains "or later" state! No licensing _changes_ here, only form is adjusted (article, space between "GPL" and "v2" and so on). Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
This change retains "or later" state! No licensing _changes_ here,
only form is adjusted (article, space between "GPL" and "v2" and so on).

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Improved portability of tests 2010-08-11T12:09:28+00:00 Dan Fandrich dan@coneharvesters.com 2010-08-11T06:33:57+00:00 775965de859c6df5d5652f3f58edfd68803f0813 Removed assumptions about umask and locale. Fixed hostname tests to work even when the host has no DNS domain set. Signed-off-by: Dan Fandrich <dan@coneharvesters.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Removed assumptions about umask and locale. Fixed hostname
tests to work even when the host has no DNS domain set.

Signed-off-by: Dan Fandrich <dan@coneharvesters.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
randomconfig fixes 2010-07-05T19:37:12+00:00 Denys Vlasenko vda.linux@googlemail.com 2010-07-05T19:37:12+00:00 9297dbc9d285e823af59c443e0123cb99577569a Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
cpio.tests: mention suid bits too, not only sgid 2010-06-18T10:28:05+00:00 Denys Vlasenko vda.linux@googlemail.com 2010-06-18T10:28:05+00:00 0f022c05658a4c014ebdebdc55461afa890c98a0 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
data_extract_all: do not chmod symlink. Closes 2053 2010-06-18T00:00:55+00:00 Denys Vlasenko vda.linux@googlemail.com 2010-06-18T00:00:55+00:00 d86b4c3907a78ab8785bcd6342ca233d0fe23ed0 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>