From: Denys Vlasenko <vda.linux@googlemail.com>
Date: Fri, 8 Jan 2010 17:07:33 +0000 (+0100)
Subject: dpkg: fix handling of names with leading dots. Closes bug 783
X-Git-Tag: 1_16_0~76
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=6fd42b3d00bb35d38eaa0fc64409992a4760f749;p=oweals%2Fbusybox.git

dpkg: fix handling of names with leading dots. Closes bug 783

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
---

diff --git a/archival/dpkg.c b/archival/dpkg.c
index 616bce977..9f58b54e6 100644
--- a/archival/dpkg.c
+++ b/archival/dpkg.c
@@ -1493,7 +1493,18 @@ static void FAST_FUNC data_extract_all_prefix(archive_handle_t *archive_handle)
 {
 	char *name_ptr = archive_handle->file_header->name;
 
-	name_ptr += strspn(name_ptr, "./");
+	/* Skip all leading "/" */
+	while (*name_ptr == '/')
+		name_ptr++;
+	/* Skip all leading "./" and "../" */
+	while (name_ptr[0] == '.') {
+		if (name_ptr[1] == '.' && name_ptr[2] == '/')
+			name_ptr++;
+		if (name_ptr[1] != '/')
+			break;
+		name_ptr += 2;
+	}
+
 	if (name_ptr[0] != '\0') {
 		archive_handle->file_header->name = xasprintf("%s%s", archive_handle->dpkg__buffer, name_ptr);
 		data_extract_all(archive_handle);