feedc0de/platformio-core
1
0
Fork 0
forked from platformio/platformio-core
Code Pull Requests Activity

Temporary disable security checking for Tar items

Browse Source
This commit is contained in:
Ivan Kravets
2019-10-24 15:39:41 +03:00
parent 0b500dba54
commit 69d9438c71
1 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
platformio/unpacker.py
View File

@ -73,19 +73,19 @@ class TARArchive(ArchiveBase):
base=self.resolve_path(os.path.join(base, os.path.dirname(tarinfo.name))), base=self.resolve_path(os.path.join(base, os.path.dirname(tarinfo.name))),
) )
def extract_item(self, item, dest_dir): # def extract_item(self, item, dest_dir):
bad_conds = [ # bad_conds = [
self.is_link(item) and self.is_bad_link(item, dest_dir), # self.is_link(item) and self.is_bad_link(item, dest_dir),
not self.is_link(item) and self.is_bad_path(item.name, dest_dir), # not self.is_link(item) and self.is_bad_path(item.name, dest_dir),
] # ]
if not any(bad_conds): # if not any(bad_conds):
super(TARArchive, self).extract_item(item, dest_dir) # super(TARArchive, self).extract_item(item, dest_dir)
else: # else:
click.secho( # click.secho(
"Blocked insecure item `%s` from archive" % item.name, # "Blocked insecure item `%s` from archive" % item.name,
fg="red", # fg="red",
err=True, # err=True,
) # )
class ZIPArchive(ArchiveBase): class ZIPArchive(ArchiveBase):