Code

security fixes for v1.3.2#622

Code

Merged

piksel merged 4 commits intomastericsharpcode/SharpZipLib:masterfrom sec/v1.3.2icsharpcode/SharpZipLib:sec/v1.3.2Copy head branch name to clipboardMay 8, 2021

+11-3

Commits

Commits on May 8, 2021

• test: alter LimitExtractPath to check for file/dir collision

  piksel

  committed
  da9d6e8

  Copy full SHA for da9d6e8

• fix: disallow traversal when file and base dir share name

  piksel

  committed
  b852a74

  Copy full SHA for b852a74

• fix: use random file name for writing asciitrans tar entries

  piksel

  committed
  2e3e2e8

  Copy full SHA for 2e3e2e8

• fix: add dir separator to base dir if missing

  piksel

  committed
  4875a45

  Copy full SHA for 4875a45