Skip to content

Lhasa 0.1.0

Compare
Choose a tag to compare
@fragglet fragglet released this 20 Apr 05:46
· 123 commits to master since this release
v0.1.0
 * There are now test archives for OS-9 and OS-9/68k (OSK) and a
   workaround for a bug in the OSK lha tool on this platform. OSK level
   0 extended areas are also supported.
 * Extracted files are now written using O_EXCL, which prevents
   malicious symbolic links being used to redirect output.
 * Directory paths containing '..' as a directory name are now
   sanitized, to prevent malicious archives being able to overwrite
   arbitrary files on the filesystem.
 * Symbolic links are now extracted in a safer way, being created as
   dummy files that are overwritten with proper symbolic links at the
   end of extraction. This is the same behavior used by GNU tar to
   prevent malicious use of symbolic links.
 * Automake 1.13 is now properly supported (thanks Jan Engelhardt).
   Processing of archives read from IPC pipes (including stdin) has
   been fixed.