]> err.no Git - dpkg/commit
Avoid extracting files through symlinks
authorRaphael Hertzog <hertzog@debian.org>
Tue, 18 Mar 2008 16:39:08 +0000 (17:39 +0100)
committerRaphael Hertzog <hertzog@debian.org>
Tue, 18 Mar 2008 16:39:08 +0000 (17:39 +0100)
commit867c88dadccff6e285c48dadccb61f9001b50d9b
tree92512adac743d9bd2dba66a827bc393db9f73941
parent383c2803acef3821323048259119ef2cf01e5d83
Avoid extracting files through symlinks

* scripts/Dpkg/Source/Package/V2_0.pm (do_extract): Now
that the debian tarball is extracted in-place over the
unpacked source directory, it's important to not let tar
unpack files in symlinked directories (otherwise it would
be possible to write files outside of the unpacked
source tree).
scripts/Dpkg/Source/Package/V2_0.pm