busybox-w32/archival/libarchive/header_list.c, branch cron_changes
A mirror of https://github.com/rmyorston/busybox-w32.git
https://git.lua4.win/busybox-w32/atom?h=cron_changes
2025-09-24T01:30:12+00:00
archival/libarchive: sanitize filenames on output (prevent control sequence attacks
2025-09-24T01:30:12+00:00
Denys Vlasenko
vda.linux@googlemail.com
2025-09-24T01:28:47+00:00
urn:sha1:f5e1bf966b19ea1821f00a8c9ecd7774598689b4
This fixes CVE-2025-46394 (terminal escape sequence injection)
Original credit: Ian.Norton at entrust.com
function old new delta
header_list 9 15 +6
header_verbose_list 239 244 +5
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 11/0) Total: 11 bytes
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
rename archive.h to bb_archive.h. no code changes
2011-09-22T10:45:14+00:00
Denys Vlasenko
vda.linux@googlemail.com
2011-09-22T10:45:14+00:00
urn:sha1:d184a728cf5c270f1653f60bc0b6b83290127121
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
rename archival/libunarchive -> archival/libarchive; move bz/ into it
2010-11-03T01:38:31+00:00
Denys Vlasenko
vda.linux@googlemail.com
2010-11-03T01:38:31+00:00
urn:sha1:833d4e7f84f59099ee66eabfa3457ebb7d37eaa8
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>