GO-2020-0035: Path traversal in github.com/yi-ge/unzip

unzip

package module

v1.0.2 Latest Latest Go to latest Published: Sep 1, 2019 License: MIT Imports: 11 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Golang *.zip decompress.

Fork from https://github.com/artdarek/go-unzip and remove print, add support for Symlink.

Thank artdarek.

import "github.com/yi-ge/unzip"

u := unzip.New(filePath, outDir)
err := u.Extract()

由于 Golang1.12 不再支持 Windows XP，因此使用 Golang 自带的 zip 库将在 XP 系统下发生报错，此库对老版本的支持则是自动下载远程unzip.exe并自动调用http://infozip.sourceforge.net/UnZip.html实现。

Rendered for

This section is empty.

This section is empty.

func FileIsExist(filename string) bool

FileIsExist -判断文件是否存在存在返回 true 不存在返回false

func GetOsVersion() float32

func ReadRemote(urlString string, hostHeader string, client *http.Client) (b []byte, err error)

ReadRemote - Do GET reuqest. Returns a slice of byte. If the hostHeader string for a module is "" then we use no hostHeader for it.

type Unzip struct {
	Src  string
	Dest string
}

Unzip - struct

func New(src string, dest string) Unzip

New - Create a new Unzip.

func (uz Unzip) Extract() error

Extract - Extract zip file.