Skip to content

Disk images: a folder comes out at once only with a 7-Zip known to make no links; any other copies file by file - #257

Merged
mwo-dk merged 1 commit into
masterfrom
sevenzip-safe
Oct 19, 2026
Merged

mwo-dk merged 1 commit into
masterfrom
sevenzip-safe

Conversation

@mwo-dk

@mwo-dk mwo-dk commented Oct 19, 2026

Copy link
Copy Markdown
Owner

From an automated security review of #256: the folder-at-once extraction was taken unless the banner said p7zip, so a detection failure (timeout, odd banner, an older 7-Zip without p7zip in its banner) fell to the bulk 7z x path, where an old 7-Zip may create links from the image.

  • Bulk x -snl- only when the banner positively names 7-Zip 21 or later and no p7zip; anything else copies file by file (links never made). Fail closed.
  • Test with real banners (26.04, 21.07, p7zip 16.02 both orders, 19.00, empty, other).
  • Docs updated.

@mwo-dk
mwo-dk enabled auto-merge (squash) October 19, 2026 18:05
@mwo-dk
mwo-dk merged commit 1eeab8d into master Oct 19, 2026
20 checks passed
@mwo-dk
mwo-dk deleted the sevenzip-safe branch October 19, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant