summaryrefslogtreecommitdiffstats
path: root/chrome/common/zip.cc
Commit message (Collapse)AuthorAgeFilesLines
* Avoid directory traversal attacks when unpacking zips. The sandbox would tendcevans@chromium.org2009-07-231-0/+5
| | | | | | | | | | | | | to catch & deny this, but the Linux and Mac port does not yet do extension packing inside the sandbox. Therefore, reject any filenames in the zip which have .. in them. BUG=NONE TEST=ZipTest.UnzipEvil Review URL: http://codereview.chromium.org/160028 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@21460 0039d316-1c4b-4281-b951-d872f2087c98
* (Identical to 159254 which I had in a messed up client)cevans@chromium.org2009-07-231-1/+1
| | | | | | | | | | | | | | Fix an off-by-one in the zip filename reading code. It's pretty harmless, and caused by a fairly lousy minizip API. It could lead to an out-of-bounds read due to lack of null termination. No way to reliably test. BUG=NONE TEST=NONE Review URL: http://codereview.chromium.org/155984 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@21397 0039d316-1c4b-4281-b951-d872f2087c98
* Include a parent directory link in the file list for file:///somepathyuzo@chromium.org2009-06-091-1/+3
| | | | | | | | | | | | | | | Also, order files/directories lexicographically. TEST=on linux, type file:///usr/ in the address bar and make sure the contents are sorted and include an entry for '..', which is [parent directory]. On windows, type file:///C:/Users/ . BUG=12621, 12812 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@17933 0039d316-1c4b-4281-b951-d872f2087c98
* Fix bustage.aa@chromium.org2009-06-011-1/+1
| | | | | | Review URL: http://codereview.chromium.org/118067 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@17306 0039d316-1c4b-4281-b951-d872f2087c98
* Implements a Zip() utility function. Refactor existingaa@chromium.org2009-06-011-0/+299
Unzip-relatedness into shared locations. Review URL: http://codereview.chromium.org/118028 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@17305 0039d316-1c4b-4281-b951-d872f2087c98
generated by cgit v1.1 at 2025-01-29 19:00:01 +0000