squashfs-tools-ng.git/bin/rdsquashfs, branch v1.2.0

Check sqfs_tree_node_get_path return value in rdsquashfs error path

2022-08-23T18:03:45+00:00

Signed-off-by: David Oberhollenzer

Make sqfs_tree_node_get_path more robust

2022-07-08T17:17:35+00:00

Test against various invariants: - Every non-root node must have a name - The root node muts not have a name - The name must not be ".." or "." - The name must not contain '/' - The loop that chases parent pointers must terminate, i.e. we must never reach the starting state again (link loop). Furthermore, make sure the sum of all path components plus separators does not overflow. Signed-off-by: David Oberhollenzer

Move sqfs_tree_node_get_path to libsquashfs

2022-07-08T17:17:35+00:00

Signed-off-by: David Oberhollenzer

Cleanup: move mkdir_p from libcommon to libutil

2022-07-08T17:17:35+00:00

Signed-off-by: David Oberhollenzer

Cleanup: rename libfstream to libio, split headers

2022-07-08T17:17:35+00:00

Signed-off-by: David Oberhollenzer

Fix: use correct printf specifier for 64bit types

2022-03-10T22:17:20+00:00

Signed-off-by: David Oberhollenzer

Fix symlink path traversal in rdsqaushfs

2021-08-12T16:24:38+00:00

If rdsquashfs unpacks a directory tree that contains a symlink, followed by something else with the exact same name, it will follow the symlink and can be tricked into writing to an arbitrary filesystem location controlled by the SquashFS image. Because there might actually be a reasonable use case, where an image is unpacked into an directory existing directory tree, with symlinks that should be followed, this is solved as follows: - Before unpacking, recursively sort the directory by filename. - FAIL if (after sorting) two consequtive entries at the same hierarchy level have the same name. This solution is more generic and prevents the unpacker from accessing the same thing twice in generall, thus also excluding the symlink issue. Hardlinks are already unfolded into duplicate tree nodes by the tree reader (with loop detection) so that should not prompt further issues. Signed-off-by: David Oberhollenzer

Fix format string type/signedness mismatch issues

2021-06-25T13:12:41+00:00

Signed-off-by: David Oberhollenzer

Add default cases for every switch block

2021-06-25T13:12:41+00:00

Signed-off-by: David Oberhollenzer

Fix: libsquashfs: add sqfs_free() function

2021-04-08T10:04:33+00:00

On systems like Windows, the dynamic library and applications can easily end up being linked against different runtime libraries, so applications cannot be expected to be able to free() any malloc'd pointer that the library returns. This commit adds an sqfs_free function so the application can pass pointers back to the library to call the correct free() implementation. Signed-off-by: David Oberhollenzer