Leslie P. Polzer 03f19aa4ea cmSystemTools: Fix path traversal vulnerability in archive extraction ...

Add security flags to libarchive extraction to prevent path traversal
(Zip Slip) and absolute path attacks:

- ARCHIVE_EXTRACT_SECURE_NODOTDOT: Block ".." path components
- ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS: Block absolute paths
- ARCHIVE_EXTRACT_SECURE_SYMLINKS: Block symlinks escaping extract dir

This hardens both `cmake -E tar` and `file(ARCHIVE_EXTRACT)` against
malicious archives that attempt to write files outside the intended
extraction directory.

2026-01-16 08:54:07 -05:00

..

7zip-bz2.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip-gz.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip-lzma.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip-xz.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip-zstd-unsupported-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip-zstd-unsupported-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

7zip-zstd.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

7zip.cmake

…

bad-compression-level-7z-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-7z-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-7z-zstd-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-7z-zstd-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-bz2-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-bz2-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-gz-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-gz-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-lzma-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-lzma-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-no-compression-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-no-compression-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-not-a-number-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-not-a-number-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-xz-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-xz-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-zip-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-zip-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-zip-zstd-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-zip-zstd-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-compression-level-zstd-result.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-level-zstd-stderr.txt

cli tar: support compression level

2025-12-05 20:00:24 +03:00

bad-compression-method-different-result.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-compression-method-different-stderr.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-compression-method-duplicate-result.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-compression-method-duplicate-stderr.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-compression-method-unknown-result.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-compression-method-unknown-stderr.txt

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

bad-file-result.txt

…

bad-file-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

bad-format-result.txt

…

bad-format-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

bad-from1-result.txt

…

bad-from1-stderr.txt

…

bad-from2-result.txt

…

bad-from2-stderr.txt

…

bad-from3-result.txt

…

bad-from3-stderr.txt

…

bad-from3.txt

…

bad-from4-result.txt

…

bad-from4-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

bad-from4.txt

…

bad-from5-result.txt

…

bad-from5-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

bad-from5.txt

…

bad-mtime1-result.txt

…

bad-mtime1-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

bad-opt1-result.txt

…

bad-opt1-stderr.txt

…

bad-threads-not-a-number-result.txt

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

bad-threads-not-a-number-stderr.txt

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

bad-without-action-result.txt

…

bad-without-action-stderr.txt

…

bad-wrong-flag-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

CMakeLists.txt

…

compression-level-7z-zstd.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

compression-level-7z.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

compression-level-bz2.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

compression-level-gz.cmake

cli tar: support compression level

2025-12-05 20:00:24 +03:00

compression-level-lzma.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-level-xz.cmake

cli tar: support compression level

2025-12-05 20:00:24 +03:00

compression-level-zip-zstd.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

compression-level-zip.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

compression-level-zstd.cmake

cli tar: support compression level

2025-12-05 20:00:24 +03:00

compression-method-bzip2.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-deflate.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-gzip.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-lzma2.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-lzma.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-none.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-ppmd.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-store.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-xz.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

compression-method-zstd.cmake

cli tar: extend supported compression methods

2026-01-06 09:49:57 +03:00

end-opt1-result.txt

…

end-opt1-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

end-opt2-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

gnutar-gz.cmake

…

gnutar.cmake

…

mtime-tests.cmake

…

path-absolute-stderr.txt

cmSystemTools: Fix path traversal vulnerability in archive extraction

2026-01-16 08:54:07 -05:00

path-absolute.cmake

cmSystemTools: Fix path traversal vulnerability in archive extraction

2026-01-16 08:54:07 -05:00

path-traversal-stderr.txt

cmSystemTools: Fix path traversal vulnerability in archive extraction

2026-01-16 08:54:07 -05:00

path-traversal.cmake

cmSystemTools: Fix path traversal vulnerability in archive extraction

2026-01-16 08:54:07 -05:00

pax-lzma.cmake

cli tar: implement LZMA support

2025-12-02 10:44:49 +03:00

pax-xz.cmake

…

pax-zstd.cmake

…

pax.cmake

…

paxr-bz2.cmake

…

paxr.cmake

…

roundtrip.cmake

…

RunCMakeTest.cmake

cmSystemTools: Fix path traversal vulnerability in archive extraction

2026-01-16 08:54:07 -05:00

set-mtime.cmake

…

test-file.txt

…

threads-7zip.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

threads-bz2.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

threads-gz.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

threads-xz.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

threads-zip.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

threads-zstd.cmake

cli tar: support multithreading compression

2025-12-03 02:45:30 -05:00

touch-mtime.cmake

…

without-files-stderr.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-bz2-unsupported-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-bz2-unsupported-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

zip-bz2.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-filtered.cmake

…

zip-gz.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-lzma-unsupported-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-lzma-unsupported-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

zip-lzma.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-xz-unsupported-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-xz-unsupported-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

zip-xz.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-zstd-unsupported-result.txt

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip-zstd-unsupported-stderr.txt

cmake -E tar: Improve error message formatting

2026-01-16 08:53:28 -05:00

zip-zstd.cmake

cli tar: support different algorithms for zip & 7z

2025-12-11 12:00:31 -05:00

zip.cmake

…