mirror of
https://github.com/github/codeql.git
synced 2026-08-05 01:43:23 +02:00
17 lines
336 B
Go
17 lines
336 B
Go
package main
|
|
|
|
import (
|
|
"archive/zip"
|
|
"io/ioutil"
|
|
"path/filepath"
|
|
)
|
|
|
|
func unzip(f string) {
|
|
r, _ := zip.OpenReader(f)
|
|
for _, f := range r.File {
|
|
p, _ := filepath.Abs(f.Name)
|
|
// BAD: This could overwrite any file on the file system
|
|
ioutil.WriteFile(p, []byte("present"), 0666) // $ Sink[go/zipslip]
|
|
} // $ Alert[go/zipslip]
|
|
}
|