patch 9.1.1552: [security]: path traversal issue in tar.vim

Browse Source

Problem:  [security]: path traversal issue in tar.vim
          (@ax)
Solution: warn the user for such things, drop leading /, don't
          forcefully overwrite files when writing temporary files,
          refactor autoload/tar.vim

tar.vim: drop leading / in path names

A tar archive containing files with leading `/` may cause confusions as
to where the content is extracted.  Let's make sure we drop the leading
`/` and use a relative path instead.

Also while at it, had to refactor it quite a bit and increase the
minimum supported Vim version to v9. Also add a test for some basic tar
functionality

closes: #17733

...

This commit is contained in:

Christian Brabandt

2025-07-15 21:54:00 +02:00

parent 586294a041

commit 87757c6b0a

11 changed files with 340 additions and 224 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

src/testdir/samples/evil.tar Normal file

Binary file not shown.

BIN

src/testdir/samples/sample.tar Normal file

Binary file not shown.