<feed xmlns='http://www.w3.org/2005/Atom'>
<title>squashfs-tools-ng.git, branch v1.1.3</title>
<subtitle>A new set of tools and libraries for working with SquashFS images</subtitle>
<id>https://git.infraroot.at/squashfs-tools-ng.git/atom?h=v1.1.3</id>
<link rel='self' href='https://git.infraroot.at/squashfs-tools-ng.git/atom?h=v1.1.3'/>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/'/>
<updated>2021-08-15T20:34:59+00:00</updated>
<entry>
<title>Release version 1.1.3</title>
<updated>2021-08-15T20:34:59+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-15T20:34:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=11dfe80e867f199bbf40a3bdcffa77b4aa6429f6'/>
<id>urn:sha1:11dfe80e867f199bbf40a3bdcffa77b4aa6429f6</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Fix explicit NULL derference for the extract-one example</title>
<updated>2021-08-15T20:34:15+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-15T20:05:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=43248f33b6c1e123d43bb93f2cdac5e5e6b1d9aa'/>
<id>urn:sha1:43248f33b6c1e123d43bb93f2cdac5e5e6b1d9aa</id>
<content type='text'>
On the 1.1.x branch, the upstream "allow delete if NULL" patch is not
applied, so this needs an explcit fix.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Update CHANGELOG.md</title>
<updated>2021-08-15T20:34:15+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-14T20:12:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=2d73cdd49c5371dc4b7980f70b066edb412b91b3'/>
<id>urn:sha1:2d73cdd49c5371dc4b7980f70b066edb412b91b3</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Fix checksums for the corpora tests</title>
<updated>2021-08-15T18:08:40+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-14T16:56:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=b74b5a23c0e4fb75400dae34c822e930de9c677d'/>
<id>urn:sha1:b74b5a23c0e4fb75400dae34c822e930de9c677d</id>
<content type='text'>
Due to the change in directory size accounting, the checksums no
longer matched.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Add a test case for the path traversal bug</title>
<updated>2021-08-14T13:12:24+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-14T10:37:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=1deb54c95d508f9adce1dddb073f0b0e4f8e7ba1'/>
<id>urn:sha1:1deb54c95d508f9adce1dddb073f0b0e4f8e7ba1</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Fix symlink path traversal in rdsqaushfs</title>
<updated>2021-08-12T16:24:38+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-12T13:01:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=ad109e2b119cb3ed27c7d964be9625d415447eb1'/>
<id>urn:sha1:ad109e2b119cb3ed27c7d964be9625d415447eb1</id>
<content type='text'>
If rdsquashfs unpacks a directory tree that contains a symlink,
followed by something else with the exact same name, it will
follow the symlink and can be tricked into writing to an
arbitrary filesystem location controlled by the SquashFS image.

Because there might actually be a reasonable use case, where an
image is unpacked into an directory existing directory tree, with
symlinks that should be followed, this is solved as follows:

 - Before unpacking, recursively sort the directory by filename.
 - FAIL if (after sorting) two consequtive entries at the same
   hierarchy level have the same name.

This solution is more generic and prevents the unpacker from accessing
the same thing twice in generall, thus also excluding the symlink issue.

Hardlinks are already unfolded into duplicate tree nodes by the tree
reader (with loop detection) so that should not prompt further issues.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Add an explicit license boiler plate to all the example programs</title>
<updated>2021-08-12T16:24:38+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2021-08-02T10:55:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=4188e94626aba41695eac49852c9e21203727e8c'/>
<id>urn:sha1:4188e94626aba41695eac49852c9e21203727e8c</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Add a simple example to show how to extract a single text file</title>
<updated>2021-08-12T16:24:38+00:00</updated>
<author>
<name>Luca Boccassi</name>
<email>luca.boccassi@microsoft.com</email>
</author>
<published>2021-07-30T15:46:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=f9d242aed57ce2d41b4b4c5615b1a345d0ad6ee4'/>
<id>urn:sha1:f9d242aed57ce2d41b4b4c5615b1a345d0ad6ee4</id>
<content type='text'>
Licensed under 0BSD: https://opensource.org/licenses/0BSD

Signed-off-by: Luca Boccassi &lt;luca.boccassi@microsoft.com&gt;
</content>
</entry>
<entry>
<title>Replace format.txt with an asciidoc version</title>
<updated>2021-08-12T16:24:12+00:00</updated>
<author>
<name>Zachary Dremann</name>
<email>dremann@gmail.com</email>
</author>
<published>2021-08-01T15:50:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=23b81d2554973fed261f51bfe878a9d983caf53d'/>
<id>urn:sha1:23b81d2554973fed261f51bfe878a9d983caf53d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Strip space from first column of format.txt</title>
<updated>2021-08-12T16:24:11+00:00</updated>
<author>
<name>Zachary Dremann</name>
<email>dremann@gmail.com</email>
</author>
<published>2021-08-01T15:39:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=915808aaf0660b03fc2e3fa5e95a2f2e2aaa6daf'/>
<id>urn:sha1:915808aaf0660b03fc2e3fa5e95a2f2e2aaa6daf</id>
<content type='text'>
This is to allow git to recognize that format.txt "moves" to format.adoc
in the next commit (with -M20, at least), which should allow easier
comparison for what has changed (and more importantly, what hasn't) in
converting to asciidoc. For instance, doing the diff with the following
options:

```
-M20 --ignore-all-space --word-diff
```
</content>
</entry>
</feed>
