<feed xmlns='http://www.w3.org/2005/Atom'>
<title>busybox-w32/testsuite/cpio.tests, branch waitfor</title>
<subtitle>A mirror of https://github.com/rmyorston/busybox-w32.git
</subtitle>
<id>https://git.lua4.win/busybox-w32/atom?h=waitfor</id>
<link rel='self' href='https://git.lua4.win/busybox-w32/atom?h=waitfor'/>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/'/>
<updated>2026-04-30T08:04:47+00:00</updated>
<entry>
<title>cpio.tests: fix false positive</title>
<updated>2026-04-30T08:04:47+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-04-30T08:04:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=25b756f789e7dda8048f69f2ab23f9cdb5d78d6f'/>
<id>urn:sha1:25b756f789e7dda8048f69f2ab23f9cdb5d78d6f</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>cpio.tests: do not use "ls" to detect that file does not exist</title>
<updated>2026-04-30T06:05:42+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-04-30T06:05:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=3b3d0fc5352ac036520bac74073b9b205a21b7c3'/>
<id>urn:sha1:3b3d0fc5352ac036520bac74073b9b205a21b7c3</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>cpio.tests: fix false positive when -o support is not enabled</title>
<updated>2026-04-30T04:46:44+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-04-30T04:46:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=4f11a4b25d5a1093695653d1826ba69eecc9d304'/>
<id>urn:sha1:4f11a4b25d5a1093695653d1826ba69eecc9d304</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>cpio: fix a bug (wrong free() address) in !FEATURE_TAR_LONG_OPTIONS config</title>
<updated>2026-04-30T03:56:58+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2026-04-30T03:56:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=6908229d4f7f9d3f199d831e09cacd48bb08a97b'/>
<id>urn:sha1:6908229d4f7f9d3f199d831e09cacd48bb08a97b</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>archival: disallow path traversals (CVE-2023-39810)</title>
<updated>2025-04-16T01:03:17+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2024-10-02T08:12:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=9a8796436b9b0641e13480811902ea2ac57881d3'/>
<id>urn:sha1:9a8796436b9b0641e13480811902ea2ac57881d3</id>
<content type='text'>
Create new configure option for archival/libarchive based extractions to
disallow path traversals.
As this is a paranoid option and might introduce backward
incompatibility, default it to no.

Fixes: CVE-2023-39810

Based on the patch by Peter Kaestle &lt;peter.kaestle@nokia.com&gt;

function                                             old     new   delta
data_extract_all                                     921     945     +24
strip_unsafe_prefix                                  101     102      +1
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 25/0)               Total: 25 bytes

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>randomconfig fixes</title>
<updated>2020-06-23T19:28:19+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2020-06-23T19:28:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=5fa5c4bde8b9ab75fa0ed37ee2fafca3fd46288a'/>
<id>urn:sha1:5fa5c4bde8b9ab75fa0ed37ee2fafca3fd46288a</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>randomconfig fixes</title>
<updated>2016-12-12T08:26:16+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2016-12-12T08:26:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=52ae0980112f57bbdf4590f649432264d00cc943'/>
<id>urn:sha1:52ae0980112f57bbdf4590f649432264d00cc943</id>
<content type='text'>
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>cpio: add ownership (-R) test cases</title>
<updated>2016-11-04T21:32:46+00:00</updated>
<author>
<name>Aaro Koskinen</name>
<email>aaro.koskinen@iki.fi</email>
</author>
<published>2016-11-02T22:25:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=46443a383cdd977d3b7644ffdac8041fa55e51da'/>
<id>urn:sha1:46443a383cdd977d3b7644ffdac8041fa55e51da</id>
<content type='text'>
Add ownership (-R) test cases.

Signed-off-by: Aaro Koskinen &lt;aaro.koskinen@iki.fi&gt;
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>cpio: avoid 'not created: newer or same age file exists' message for dirs</title>
<updated>2010-10-17T22:54:51+00:00</updated>
<author>
<name>Pascal Bellard</name>
<email>pascal.bellard@ads-lu.com</email>
</author>
<published>2010-10-17T22:54:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=873bb31d1703aae080d1928b5928c0011a944485'/>
<id>urn:sha1:873bb31d1703aae080d1928b5928c0011a944485</id>
<content type='text'>
Signed-off-by: Pascal Bellard &lt;pascal.bellard@ads-lu.com&gt;
Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
<entry>
<title>*: make GNU licensing statement forms more regular</title>
<updated>2010-08-16T18:14:46+00:00</updated>
<author>
<name>Denys Vlasenko</name>
<email>vda.linux@googlemail.com</email>
</author>
<published>2010-08-16T18:14:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.lua4.win/busybox-w32/commit/?id=0ef64bdb40c54681e8dd5ab8df42ac88e4ab1d4a'/>
<id>urn:sha1:0ef64bdb40c54681e8dd5ab8df42ac88e4ab1d4a</id>
<content type='text'>
This change retains "or later" state! No licensing _changes_ here,
only form is adjusted (article, space between "GPL" and "v2" and so on).

Signed-off-by: Denys Vlasenko &lt;vda.linux@googlemail.com&gt;
</content>
</entry>
</feed>
