Skip to content

Commit 87757c6

Browse files
committed
patch 9.1.1552: [security]: path traversal issue in tar.vim
Problem: [security]: path traversal issue in tar.vim (@ax) Solution: warn the user for such things, drop leading /, don't forcefully overwrite files when writing temporary files, refactor autoload/tar.vim tar.vim: drop leading / in path names A tar archive containing files with leading `/` may cause confusions as to where the content is extracted. Let's make sure we drop the leading `/` and use a relative path instead. Also while at it, had to refactor it quite a bit and increase the minimum supported Vim version to v9. Also add a test for some basic tar functionality closes: vim#17733
1 parent 586294a commit 87757c6

File tree

11 files changed

+332
-216
lines changed

11 files changed

+332
-216
lines changed

Filelist

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,7 +213,9 @@ SRC_ALL = \
213213
src/testdir/samples/*.txt \
214214
src/testdir/samples/*.vim \
215215
src/testdir/samples/evil.zip \
216+
src/testdir/samples/evil.tar \
216217
src/testdir/samples/poc.zip \
218+
src/testdir/samples/sample.tar \
217219
src/testdir/samples/test.zip \
218220
src/testdir/samples/test000 \
219221
src/testdir/samples/test_undo.txt.undo \

0 commit comments

Comments
 (0)