t takahashi <[EMAIL PROTECTED]> wrote:

> in my bug, i reported, in addition to absolute and .. pathnames, a
> related and imho nastier exploit, in which you unpack *symlinks* that
> point to ../../../../../../... but whose paths do not themselves have
> to contain .., then unpack relative paths that do also do not have to
> contain .. .

Yes, CVS version is able to handle this too. (Use --no-absolute-filenames
option.)

Regargs,
Sergey


_______________________________________________
Bug-cpio mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-cpio

Reply via email to