tar-0.3.1.0: Reading, writing and manipulating ".tar" archive files.ContentsIndex
Codec.Archive.Tar.Check
Portabilityportable
Maintainerduncan@haskell.org
Description
Perform various checks on tar file entries.
Synopsis
checkSecurity :: Entries -> Entries
checkTarbomb :: FilePath -> Entries -> Entries
checkPortability :: Entries -> Entries
Documentation
checkSecurity :: Entries -> Entries

This function checks a sequence of tar entries for file name security problems. It checks that:

  • file paths are not absolute
  • file paths do not contain any path components that are ".."
  • file names are valid

These checks are from the perspective of the current OS. That means we check for "C:blah" files on Windows and "/blah" files on Unix. For archive entry types HardLink and SymbolicLink the same checks are done for the link target. A failure in any entry terminates the sequence of entries with an error.

checkTarbomb :: FilePath -> Entries -> Entries
checkPortability :: Entries -> Entries
Produced by Haddock version 2.6.0