jinx/pyinstxtractor
1
Fork 0
mirror of https://github.com/extremecoders-re/pyinstxtractor.git synced 2025-08-02 16:24:45 +08:00
Code Issues Packages Projects Releases Wiki Activity

Handle CArchive entries starting with an absolute file path, closes #67

Browse Source
This commit is contained in:
extremecoders-re
2023-06-09 03:01:02 +05:30
committed by GitHub
parent cad8c74542
commit 5268087d25
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pyinstxtractor.py
View File

@@ -232,6 +232,11 @@ class PyInstArchive:
self.fPtr.read(entrySize - 4)) self.fPtr.read(entrySize - 4))
name = name.decode('utf-8').rstrip('\0') name = name.decode('utf-8').rstrip('\0')
# Prevent writing outside the extraction directory
if name.startswith("/"):
name = name.lstrip("/")
if len(name) == 0: if len(name) == 0:
name = str(uniquename()) name = str(uniquename())
print('[!] Warning: Found an unamed file in CArchive. Using random name {0}'.format(name)) print('[!] Warning: Found an unamed file in CArchive. Using random name {0}'.format(name))