Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix zipslip vulnerability #14

Merged
merged 4 commits into from
Aug 27, 2020
Merged

Fix zipslip vulnerability #14

merged 4 commits into from
Aug 27, 2020

Conversation

cmaglie
Copy link
Collaborator

@cmaglie cmaglie commented Aug 24, 2020

Supersedes #13

@cmaglie
Added tests for zipslip bug
8474992 
- Added a generator for rogue zip/tar files in evil_generator/main.go.
- Added a LoggingFS mock for easier unit testing
- Added tests for zipslip bug
@cmaglie
Fixed zipslip bug
e8d1fdd
@cmaglie
Fixed an issue with safeJoin
cba732a 
Also added further tests.
endorama
endorama reviewed Aug 25, 2020
View reviewed changes
extractor.go Outdated Show resolved Hide resolved
@cmaglie cmaglie merged commit 6760add into codeclysm:master Aug 27, 2020
@cmaglie cmaglie deleted the fix_zip_slip branch August 27, 2020 08:43
@cmaglie cmaglie mentioned this pull request Aug 27, 2020
Closed
@umbynos umbynos mentioned this pull request Jan 19, 2021
Merged
1 task
@umbynos umbynos mentioned this pull request Dec 7, 2023
Merged
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@endorama endorama endorama left review comments

@silvanocerza silvanocerza silvanocerza approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@cmaglie @endorama @silvanocerza