A mirror of https://github.com/rmyorston/busybox-w32.git https://git.lua4.win/busybox-w32/atom?h=zstd 2026-02-10T13:49:25+00:00 2026-02-10T13:49:25+00:00 Ron Yorston rmy@pobox.com 2026-02-10T13:49:25+00:00 urn:sha1:0e3015ddb8538f6329c59ed984a9c59bba3f376e 2026-01-29T11:01:56+00:00 Denys Vlasenko vda.linux@googlemail.com 2026-01-29T10:48:02+00:00 urn:sha1:3fb6b31c716669e12f75a2accd31bb7685b1a1cb Defends against files like these (python reproducer): import tarfile ti = tarfile.TarInfo("leak_hosts") ti.type = tarfile.LNKTYPE ti.linkname = "/etc/hosts" # or "../etc/hosts" or ".." ti.size = 0 with tarfile.open("/tmp/hardlink.tar", "w") as t: t.addfile(ti) function old new delta skip_unsafe_prefix - 127 +127 get_header_tar 1752 1754 +2 .rodata 106861 106856 -5 unzip_main 2715 2706 -9 strip_unsafe_prefix 102 18 -84 ------------------------------------------------------------------------------ (add/remove: 1/0 grow/shrink: 1/3 up/down: 129/-98) Total: 31 bytes Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2023-04-09T10:24:09+00:00 Ron Yorston rmy@pobox.com 2023-04-09T10:24:09+00:00 urn:sha1:d9f2ea8628452f787e02dd0e496af612a2e94578 2023-02-23T11:00:36+00:00 Denys Vlasenko vda.linux@googlemail.com 2023-02-23T11:00:36+00:00 urn:sha1:029740a3e43835d2a71696449baba5250a346e0a Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2023-02-22T09:50:14+00:00 Denys Vlasenko vda.linux@googlemail.com 2023-02-22T09:50:14+00:00 urn:sha1:75197998c22b0760a1a6d5e94f750b12855ef82f function old new delta unzip_main 2656 2715 +59 packed_usage 34517 34552 +35 .rodata 105250 105251 +1 ------------------------------------------------------------------------------ (add/remove: 0/0 grow/shrink: 3/0 up/down: 95/0) Total: 95 bytes Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2023-01-05T08:56:27+00:00 Ron Yorston rmy@pobox.com 2023-01-05T08:56:27+00:00 urn:sha1:e5e4a2fec5435192d1672e6db2f335cb5e89f877 2022-11-29T13:44:39+00:00 Peter Kaestle peter.kaestle@nokia.com 2022-10-25T11:56:48+00:00 urn:sha1:7ade421b1a410f4d2d2314f06d7f5a9d0fd123ec When calling unzip -l the date and time output was missing big-endian conversions. Signed-off-by: Peter Kaestle <peter.kaestle@nokia.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2021-06-28T06:46:32+00:00 Ron Yorston rmy@pobox.com 2021-06-28T06:46:32+00:00 urn:sha1:e1ad66c0b8fd58a7158d40771175a7dab224202d 2021-06-15T08:00:18+00:00 Denys Vlasenko vda.linux@googlemail.com 2021-06-15T08:00:18+00:00 urn:sha1:1f60d88cf6f5ad3efcad6e7ef1501ce334046e40 function old new delta packed_usage 33552 33541 -11 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2021-06-12T23:08:48+00:00 Denys Vlasenko vda.linux@googlemail.com 2021-06-12T23:08:48+00:00 urn:sha1:6b6826f0b87b13c5e83786f045b90d703507464e function old new delta .rodata 103190 103189 -1 packed_usage 33590 33566 -24 ------------------------------------------------------------------------------ (add/remove: 0/0 grow/shrink: 0/2 up/down: 0/-25) Total: -25 bytes Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>