mirror of
https://github.com/github/codeql.git
synced 2026-04-30 03:05:15 +02:00
Delete the examples/
This commit is contained in:
ALJI Mohamed
@@ -1,19 +0,0 @@
|
||||
import sys
|
||||
import tarfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
result = []
|
||||
for member in tar:
|
||||
if ".." in member.name:
|
||||
raise ValueError("Path in member name !!!")
|
||||
result.append(member)
|
||||
path = sys.argv[2]
|
||||
#print("files are extracted to: ", path)
|
||||
tar.extractall(path=path, members=result)
|
||||
tar.close()
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,27 +0,0 @@
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile:
|
||||
if '../' in member.name:
|
||||
print('Member name container directory traversal sequence')
|
||||
continue
|
||||
elif member.issym() or member.islnk():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,8 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
with tarfile.open(sys.argv[1]) as tar:
|
||||
for entry in tar:
|
||||
if ".." in entry.name:
|
||||
raise ValueError("Illegal tar archive entry")
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,13 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
import os
|
||||
|
||||
def _validate_archive_name(name, target):
|
||||
if not os.path.abspath(os.path.join(target, name)).startswith(target + os.path.sep):
|
||||
raise ValueError(f"Provided language pack contains invalid name {name}")
|
||||
|
||||
with tarfile.open(sys.argv[1]) as tar:
|
||||
target = "/tmp/unpack"
|
||||
for entry in tar:
|
||||
_validate_archive_name(entry.name, target)
|
||||
tar.extract(entry, target)
|
||||
@@ -1,29 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile.getmembers():
|
||||
if '../' in member.name:
|
||||
print('Member name container directory traversal sequence')
|
||||
continue
|
||||
elif (member.issym() or member.islnk()) and ('../' in member.linkname):
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,26 +0,0 @@
|
||||
# https://github.com/OctoPrint/OctoPrint/
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import os
|
||||
|
||||
def _validate_tar_info(info, target):
|
||||
_validate_archive_name(info.name, target)
|
||||
if not (info.isfile() or info.isdir()):
|
||||
raise ValueError("Provided language pack contains invalid file type")
|
||||
|
||||
def _validate_archive_name(name, target):
|
||||
if not os.path.abspath(os.path.join(target, name)).startswith(target + os.path.sep):
|
||||
raise ValueError(f"Provided language pack contains invalid name {name}")
|
||||
|
||||
target = "/tmp/unpack"
|
||||
|
||||
with tarfile.open(sys.argv[1], "r") as tar:
|
||||
|
||||
# sanity check
|
||||
for info in tar.getmembers():
|
||||
_validate_tar_info(info, target)
|
||||
|
||||
# unpack everything
|
||||
tar.extractall(target)
|
||||
|
||||
@@ -1,29 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile.getmembers():
|
||||
if '../' in member.name:
|
||||
print('Member name container directory traversal sequence')
|
||||
continue
|
||||
elif member.issym() or member.islnk():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,18 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tarf = tar.getmembers()
|
||||
for f in tarf:
|
||||
if not f.issym():
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=[f])
|
||||
tar.close()
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,6 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.open(tarball, "r") as tar:
|
||||
tar.extractall(path="/tmp/unpack/", members=tar)
|
||||
@@ -1,26 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile.getmembers():
|
||||
if member.issym() or member.islnk():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,5 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
with tarfile.open(sys.argv[1], "r") as tar:
|
||||
tar.extractall(path="/tmp/unpack")
|
||||
@@ -1,26 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile.getmembers():
|
||||
if member.issym():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,19 +0,0 @@
|
||||
# https://github.com/tensorflow/tensor2tensor
|
||||
import tarfile
|
||||
import os.path
|
||||
import sys
|
||||
|
||||
# provie the malign archive
|
||||
filename = sys.argv[1]
|
||||
tmp_dir = "/tmp/"
|
||||
|
||||
read_type = "r:gz" if filename.endswith("tgz") else "r"
|
||||
with tarfile.open(filename, read_type) as corpus_tar:
|
||||
# Create a subset of files that don't already exist.
|
||||
# tarfile.extractall errors when encountering an existing file
|
||||
# and tarfile.extract is extremely slow
|
||||
members = []
|
||||
for f in corpus_tar:
|
||||
if not os.path.isfile(os.path.join(tmp_dir, f.name)):
|
||||
members.append(f)
|
||||
corpus_tar.extractall(tmp_dir, members=members)
|
||||
@@ -1,26 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile.getmembers():
|
||||
if not member.isreg():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,8 +0,0 @@
|
||||
from fileinput import filename
|
||||
import tarfile
|
||||
import os.path
|
||||
import sys
|
||||
|
||||
archive_path = sys.argv[1]
|
||||
target_dir = "/tmp/unpack"
|
||||
tarfile.open(archive_path, "r").extractall(path=target_dir)
|
||||
@@ -1,8 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.open(tarball) as tar:
|
||||
for entry in tar:
|
||||
if entry.isfile():
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,8 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
with tarfile.open(sys.argv[1]) as tar:
|
||||
for entry in tar:
|
||||
if entry.name.startswith("/"):
|
||||
raise ValueError("Illegal tar archive entry")
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,8 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.TarFile(tarball, mode="r") as tar:
|
||||
for entry in tar:
|
||||
if entry.isfile():
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,10 +0,0 @@
|
||||
from tarfile import TarFile
|
||||
import sys
|
||||
|
||||
class MKTar(TarFile):
|
||||
pass
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with MKTar.open(name=tarball) as tar:
|
||||
for entry in tar:
|
||||
tar._extract_member(entry, entry.name)
|
||||
@@ -1,9 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
import os
|
||||
|
||||
with tarfile.open(sys.argv[1]) as tar:
|
||||
for entry in tar:
|
||||
if os.path.isabs(entry.name):
|
||||
raise ValueError("Illegal tar archive entry")
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,5 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
with tarfile.TarFile(sys.argv[1], mode="r") as tar:
|
||||
tar.extractall(path="/tmp/unpack")
|
||||
@@ -1,13 +0,0 @@
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=tar.getmembers())
|
||||
tar.close()
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,6 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
import tempfile
|
||||
|
||||
tar = tarfile.open(sys.argv[1])
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=None)
|
||||
@@ -1,26 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=members_filter(tar))
|
||||
tar.close()
|
||||
|
||||
|
||||
def members_filter(tarfile):
|
||||
result = []
|
||||
for member in tarfile:
|
||||
if member.issym() or member.islnk():
|
||||
print('Symlink to external resource')
|
||||
continue
|
||||
result.append(member)
|
||||
return result
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,5 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
with tarfile.TarFile(sys.argv[1], mode="r") as tar:
|
||||
tar.extractall(path="/tmp/unpack/", members=tar)
|
||||
@@ -1,20 +0,0 @@
|
||||
# https://github.com/PyCQA/bandit
|
||||
|
||||
import sys
|
||||
import tarfile
|
||||
import tempfile
|
||||
|
||||
def managed_members_archive_handler(filename):
|
||||
tar = tarfile.open(filename)
|
||||
result = []
|
||||
for member in tar:
|
||||
if member.issym():
|
||||
raise ValueError("But it is a symlink")
|
||||
result.append(member)
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=result)
|
||||
tar.close()
|
||||
|
||||
if __name__ == "__main__":
|
||||
if len(sys.argv) > 1:
|
||||
filename = sys.argv[1]
|
||||
managed_members_archive_handler(filename)
|
||||
@@ -1,8 +0,0 @@
|
||||
from fileinput import filename
|
||||
import tarfile
|
||||
import os.path
|
||||
import sys
|
||||
|
||||
archive_path = sys.argv[1]
|
||||
target_dir = "/tmp/unpack"
|
||||
tarfile.TarFile(sys.argv[1], mode="r").extractall(path=target_dir)
|
||||
@@ -1,6 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.open(tarball) as tar:
|
||||
tar.extractall()
|
||||
@@ -1,6 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
import tempfile
|
||||
|
||||
tar = tarfile.open(sys.argv[1])
|
||||
tar.extractall(path=tempfile.mkdtemp(), members=None)
|
||||
@@ -1,10 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
class MKTar(tarfile.TarFile):
|
||||
pass
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with MKTar.open(name=tarball) as tar:
|
||||
for entry in tar:
|
||||
tar._extract_member(entry, entry.name)
|
||||
@@ -1,36 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
from contextlib import closing, contextmanager
|
||||
import subprocess
|
||||
import os
|
||||
|
||||
@contextmanager
|
||||
def py2_tarxz(filename):
|
||||
import tempfile
|
||||
with tempfile.TemporaryFile() as tmp:
|
||||
subprocess.check_call(["xz", "-dc", filename], stdout=tmp.fileno())
|
||||
tmp.seek(0)
|
||||
with closing(tarfile.TarFile(fileobj=tmp)) as tf:
|
||||
yield tf
|
||||
|
||||
def unpack_tarball(tar_filename, dest):
|
||||
# print('Unpacking %s into %s' % (os.path.basename(tar_filename), dest))
|
||||
# if sys.version_info[0] < 3 and tar_filename.endswith('.xz'):
|
||||
# # Py 2.7 lacks lzma support
|
||||
# tar_cm = py2_tarxz(tar_filename)
|
||||
# else:
|
||||
#
|
||||
tar_cm = closing(tarfile.open(tar_filename))
|
||||
|
||||
base_dir = None
|
||||
with tar_cm as tarc:
|
||||
for member in tarc:
|
||||
base_name = member.name.split('/')[0]
|
||||
if base_dir is None:
|
||||
base_dir = base_name
|
||||
elif base_dir != base_name:
|
||||
print('Unexpected path in %s: %s' % (tar_filename, base_name))
|
||||
tarc.extractall(dest)
|
||||
return os.path.join(dest, base_dir)
|
||||
|
||||
unpack_tarball(sys.argv[1], "/tmp/unpack")
|
||||
@@ -1,7 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.open(name=tarball) as tar:
|
||||
for entry in tar:
|
||||
tar._extract_member(entry, entry.name)
|
||||
@@ -1,7 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
with tarfile.open(name=tarball) as tar:
|
||||
for entry in tar:
|
||||
tar.extract(entry, "/tmp/unpack/")
|
||||
@@ -1,6 +0,0 @@
|
||||
import tarfile
|
||||
import sys
|
||||
|
||||
tarball = sys.argv[1]
|
||||
tar = tarfile.open(tarball)
|
||||
tar.extractall("/tmp/unpack/")
|
||||
Binary file not shown.
@@ -1,15 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
mkdir -p /tmp/Sim4n6/
|
||||
FILE=/tmp/Sim4n6/sim4n6.txt
|
||||
|
||||
for f in $(ls TarSlip_*.py); do
|
||||
echo "$f";
|
||||
python3 "$f" archive_malign.tar;
|
||||
if test -f "$FILE"; then
|
||||
echo -e "\e[32mOK\e[0m"
|
||||
rm "$FILE";
|
||||
else
|
||||
echo -e "\e[31mNot OK\e[0m";
|
||||
fi
|
||||
done;
|
||||
Reference in New Issue
Block a user