← Back to branch summary

~ubuntu-branches/ubuntu/vivid/unrar-nonfree/vivid

« back to all changes in this revision

Viewing changes to ulinks.cpp

  • Committer: Package Import Robot
  • Author(s): Felix Geyer
  • Date: 2015-03-27 22:44:26 UTC
  • mfrom: (1.1.19) (5.1.19 sid)
  • Revision ID: package-import@ubuntu.com-20150327224426-lc3r0z1uryfav8yf
Tags: 1:5.2.7-0.1
http://bugs.debian.org/774171
* Non-maintainer upload.
* New upstream release
  - Fixes a symlink directory traversal vulnerability (Closes: #774171)

Show diffs side-by-side

added added

removed removed

Lines of Context:
ulinks.cpp
56
56
 
57
57
    if (!Cmd->AbsoluteLinks && (IsFullPath(Target) ||
58
58
        !IsRelativeSymlinkSafe(Arc.FileHead.FileName,Arc.FileHead.RedirName)))
59
 
 
 
59
      return false;
60
60
    return UnixSymlink(Target,LinkName,&Arc.FileHead.mtime,&Arc.FileHead.atime);
61
61
  }
62
62
  return false;