Adam Hathcock
8a7d7e366f
Merge pull request #396 from andreas-eriksson/Rar5IsEncrypted
...
Correctly set IsEncrypted for entries in Rar5.
2018-07-09 08:48:12 +01:00
Adam Hathcock
6792afbdb1
Merge branch 'master' into Rar5IsEncrypted
2018-07-09 08:44:32 +01:00
Adam Hathcock
e5a7185671
Mark for 0.22
2018-07-09 08:42:45 +01:00
Adam Hathcock
cdaf453b2d
Update dependencies and tests to .NET Core 2.1
2018-07-09 08:39:37 +01:00
Andreas Eriksson
f9cc80e1de
Correctly set IsEncrypted for entries in Rar5.
2018-06-29 15:51:40 +02:00
Adam Hathcock
7beff9e83c
Merge pull request #395 from adamhathcock/zip-slip-readers
...
Zip slip for Readers
2018-06-28 11:56:44 +01:00
Adam Hathcock
8f49f1b6f8
Merge remote-tracking branch 'origin/master' into zip-slip-readers
2018-06-28 11:52:43 +01:00
Adam Hathcock
7e336a0247
Slip in new SDK
2018-06-28 11:51:17 +01:00
Adam Hathcock
e37e8bdadc
Move path handling for extraction to be common
...
Reader and Archive now share more extraction logic
2018-06-28 11:46:51 +01:00
Adam Hathcock
40bd61b16b
Merge pull request #389 from frankyjuang/patch-1
...
Fix comment
2018-06-08 08:59:52 +01:00
Juang, Yi-Lin
87fbb45099
Fix comment
2018-06-08 11:27:43 +08:00
Adam Hathcock
f9bd7ebdb0
Merge pull request #384 from MrJul/perf-readbyte
...
Implemented ReadByte/WriteByte on streams to improve performance
2018-05-28 09:21:28 +01:00
Julien Lebosquain
540618c062
Implemented ReadByte/WriteByte on streams to improve performance
2018-05-27 16:31:44 +02:00
Adam Hathcock
9e96dec8c9
Merge pull request #383 from itn3000/add-filename-encoding-example
...
add example for custom file encoding
2018-05-23 09:14:46 +01:00
itn3000
7b7af612ba
add example for custom file encoding
2018-05-23 09:46:36 +09:00
Adam Hathcock
3a747ba87e
Update USAGE with new stream handling
2018-05-16 08:51:33 +01:00
Adam Hathcock
87e57e3a9a
Mark for 0.21.1
2018-05-15 09:14:56 +01:00
Adam Hathcock
785d0dcebf
Merge pull request #381 from adamhathcock/issue-380
...
Allow forced encoding to override default encoding
2018-05-15 09:13:16 +01:00
Adam Hathcock
2314776f55
Also check for CustomDecoder
2018-05-15 08:28:11 +01:00
Adam Hathcock
473f5d8189
Make GetDecoder use GetEncoding for forced
2018-05-14 16:20:57 +01:00
Adam Hathcock
be971cb6f7
Allow forced encoding to override default encoding
2018-05-14 16:08:31 +01:00
Adam Hathcock
3f94c1a50d
Remove lingering uses of non disposing stream
2018-05-08 14:10:49 +01:00
Adam Hathcock
2919ec293a
mark for 0.21
2018-05-06 09:39:36 +01:00
Adam Hathcock
19d25152e5
Merge pull request #378 from adamhathcock/fix_crypto_namespace
...
Fix namespaces to not interfere with bouncy castle users
2018-05-06 09:20:17 +01:00
Adam Hathcock
747180203c
Rider isn’t quite good enough in refactoring
2018-05-06 09:12:18 +01:00
Adam Hathcock
9f89a0844d
Fix namespaces to not interfere with bouncy castle users
2018-05-06 09:09:45 +01:00
Adam Hathcock
c64282e915
more naming
2018-05-06 09:07:06 +01:00
Adam Hathcock
c44a80bab2
Merge remote-tracking branch 'origin/master'
2018-05-06 08:59:23 +01:00
Adam Hathcock
8dfc4a2ffb
more variable naming
2018-05-06 08:59:00 +01:00
Adam Hathcock
c341c626a5
variable naming clean up
2018-05-06 08:49:32 +01:00
Adam Hathcock
173a0fe659
Some naming clean up
2018-05-05 19:35:58 +01:00
Adam Hathcock
5fdae1cf82
Make readonly and fix visibility
2018-05-05 19:23:34 +01:00
Adam Hathcock
9e892ab397
Merge pull request #376 from leezer3/master
...
Fix broken link in usage.md
2018-05-05 16:18:17 +01:00
Christopher Lees
e95559b4fc
Fix broken link in usage.md
2018-05-05 15:08:56 +01:00
Adam Hathcock
18475cc86d
Use proper xunit single threading
2018-05-05 09:38:56 +01:00
Adam Hathcock
88b59600cd
Merge pull request #369 from adamhathcock/leaveOpen
...
Rework LeaveOpen to be consistent
2018-05-05 09:27:32 +01:00
Adam Hathcock
9a9d64bcbe
Merge branch 'master' into leaveOpen
...
# Conflicts:
# src/SharpCompress/Compressors/LZMA/LZipStream.cs
2018-05-05 09:25:26 +01:00
Adam Hathcock
4f3408ec25
Merge pull request #375 from adamhathcock/issue_360
...
Fixes lzip stream disposal
2018-05-05 09:20:35 +01:00
Adam Hathcock
e9d0fb85ac
Merge branch 'master' into leaveOpen
2018-05-05 09:19:38 +01:00
Adam Hathcock
1ce37ef7a8
Fixes lzip stream disposal
2018-05-05 09:18:01 +01:00
Adam Hathcock
ecad356e30
Merge pull request #363 from sridhar6668/sridhar6668/support_extended_ascii
...
ZipArchive Reader: Uses IBM PC character encoding to decode filename …
2018-05-05 09:12:22 +01:00
Adam Hathcock
fafd8da91d
Merge branch 'master' into leaveOpen
2018-05-05 09:10:19 +01:00
Adam Hathcock
2fb31d4b84
Merge branch 'master' into sridhar6668/support_extended_ascii
2018-05-05 09:09:09 +01:00
Adam Hathcock
8b478451ac
Evil zip is a windows only test because of paths
2018-05-05 09:05:32 +01:00
Adam Hathcock
42b1205fb4
Merge pull request #374 from odinn1984/feat/fail_on_outside_target_files
...
fix: prevent extracting archived files outside of target path
2018-05-02 22:51:02 +01:00
odinn1986
80ceb1c375
fix: prevent extracting archived files outside of target path
...
This PR is meant to fix an arbitrary file write vulnerability, that can be
achieved using a specially crafted zip archive, that holds path traversal
filenames. When the filename gets concatenated to the target extraction
directory, the final path ends up outside of the target folder.
A sample malicious zip file named Zip.Evil.zip was used,
and when running the code below, resulted in the creation of C:/Temp/evil.txt
outside of the intended target directory.
There are various possible ways to avoid this issue, some include checking
for .. (dot dot) characters in the filename, but the best solution in our
opinion is to check if the final target filename, starts with the target
folder (after both are resolved to their absolute path).
Stay secure,
Snyk Team
2018-05-02 23:12:33 +03:00
Adam Hathcock
501407c3fe
Change flag name to be closer to spec
2018-04-29 16:33:15 +01:00
Adam Hathcock
abddabf18e
Proper fixes for all platforms
2018-04-29 16:27:26 +01:00
Adam Hathcock
91d753cbdb
Merge branch 'master' into sridhar6668/support_extended_ascii
2018-04-29 15:12:02 +01:00
Adam Hathcock
259acd0694
misc additions
2018-04-29 15:09:26 +01:00
