]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r305819:
authormm <mm@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Sep 2016 22:04:02 +0000 (22:04 +0000)
committermm <mm@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Sep 2016 22:04:02 +0000 (22:04 +0000)
commit1c59bae9e3005322caaea92af4eb9dee26acf1d3
tree7947128e08dc7e298973f86338b436136873a4d2
parentb20f7bfde324f62cf46f97b3dcbf9b98686e7e66
MFC r305819:
Sync libarchive with vendor including important security fixes.

Issues fixed (FreeBSD):
PR #778: ACL error handling
Issue #745: Symlink check prefix optimization is too aggressive
Issue #746: Hard links with data can evade sandboxing restrictions

This update fixes the vulnerability #3 and vulnerability #4 as reported in
"non-cryptanalytic attacks against FreeBSD update components".
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f

Fix for vulnerability #2 has already been merged in r305192.

Security: http://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f

git-svn-id: svn://svn.freebsd.org/base/stable/10@306322 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
contrib/libarchive/libarchive/archive_platform.h
contrib/libarchive/libarchive/archive_read_disk_entry_from_file.c
contrib/libarchive/libarchive/archive_read_disk_posix.c
contrib/libarchive/libarchive/archive_read_support_format_tar.c
contrib/libarchive/libarchive/archive_write_disk_acl.c
contrib/libarchive/libarchive/archive_write_disk_posix.c
contrib/libarchive/libarchive/test/test_write_disk_secure745.c
contrib/libarchive/libarchive/test/test_write_disk_secure746.c
contrib/libarchive/libarchive/test/test_write_format_gnutar_filenames.c
lib/libarchive/tests/Makefile