diff options
| author | Denys Vlasenko <vda.linux@googlemail.com> | 2025-09-24 03:28:47 +0200 |
|---|---|---|
| committer | Denys Vlasenko <vda.linux@googlemail.com> | 2025-09-24 03:30:12 +0200 |
| commit | f5e1bf966b19ea1821f00a8c9ecd7774598689b4 (patch) | |
| tree | f2a36bc2fc6bb958fcbb29fd6cdadcbd3262dc29 /scripts/mkdiff_obj | |
| parent | 381a40a049c1ff9b14c51fa8ce91e7f5953a682f (diff) | |
| download | busybox-w32-f5e1bf966b19ea1821f00a8c9ecd7774598689b4.tar.gz busybox-w32-f5e1bf966b19ea1821f00a8c9ecd7774598689b4.tar.bz2 busybox-w32-f5e1bf966b19ea1821f00a8c9ecd7774598689b4.zip | |
archival/libarchive: sanitize filenames on output (prevent control sequence attacks
This fixes CVE-2025-46394 (terminal escape sequence injection)
Original credit: Ian.Norton at entrust.com
function old new delta
header_list 9 15 +6
header_verbose_list 239 244 +5
------------------------------------------------------------------------------
(add/remove: 0/0 grow/shrink: 2/0 up/down: 11/0) Total: 11 bytes
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'scripts/mkdiff_obj')
0 files changed, 0 insertions, 0 deletions