GO-2020-0035: Path traversal in github.com/yi-ge/unzip

unzip

package module

v1.0.2 Latest Latest Go to latest Published: Sep 1, 2019 License: MIT Imports: 11 Imported by: 0

Details

Golang *.zip decompress.

Fork from https://github.com/artdarek/go-unzip and remove print, add support for Symlink.

Thank artdarek.

import "github.com/yi-ge/unzip"

u := unzip.New(filePath, outDir)
err := u.Extract()

由于 Golang1.12 不再支持 Windows XP，因此使用 Golang 自带的 zip 库将在 XP 系统下发生报错，此库对老版本的支持则是自动下载远程unzip.exe并自动调用http://infozip.sourceforge.net/UnZip.html实现。

Rendered for

This section is empty.

This section is empty.

func FileIsExist(filename string) bool

FileIsExist -判断文件是否存在存在返回 true 不存在返回false

func GetOsVersion() float32

func ReadRemote(urlString string, hostHeader string, client *http.Client) (b []byte, err error)

ReadRemote - Do GET reuqest. Returns a slice of byte. If the hostHeader string for a module is "" then we use no hostHeader for it.

type Unzip struct {
	Src  string
	Dest string
}

Unzip - struct

func New(src string, dest string) Unzip

New - Create a new Unzip.

func (uz Unzip) Extract() error

Extract - Extract zip file.