Skip to content

archive/zip: OpenReader does not implement GODEBUG=zipinsecurepath=0 #58641

Closed
Closed
archive/zip: OpenReader does not implement GODEBUG=zipinsecurepath=0#58641
Assignees
neild
Labels
FrozenDueToAgeNeedsFixThe path to resolution is known, but the work has not been done.
Milestone
Go1.21

Description

@neild
neild
opened on Feb 22, 2023

zip.NewReader returns ErrInsecurePath when opening a zip archive containing an insecure path and when GODEBUG=zipinsecurepath=0 is set, but we (I) overlooked OpenReader. (I thought OpenReader was implemented in terms of NewReader, but no.)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

FrozenDueToAgeNeedsFixThe path to resolution is known, but the work has not been done.

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions