Skip to content
#

extract

Here are 641 public repositories matching this topic...

coolaj86
coolaj86 commented Sep 29, 2020

I was able to confirm that os.Create() will happily follow symlinks.

Although standard tools like tar will not likely allow you to add two files with the same name to an archive file, it's certainly easy enough to do in code. This means that we need to add an additional check before writing to a destination to make sure that it's not a symlink outside of the destination.

The vulnerab

Maxim-Mazurok
Maxim-Mazurok commented Jun 8, 2021

Describe the bug
Please, add "overwrite" files in the destination option. Instead of adding *.duplicate1 files, I'd like lessmsi to overwrite files in the destination.

To Reproduce
Steps to reproduce the behavior:

  1. Use lessmsi to extract some msi
  2. Use lessmsi to extract the same msi
  3. Observe *.duplicate1 files, and no option to overwrite instead

Expected behavior

Improve this page

Add a description, image, and links to the extract topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the extract topic, visit your repo's landing page and select "manage topics."

Learn more