Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clam 2428 unrar 6.2.10 1.0.3 #1010

Merged

Conversation

micahsnyder
Copy link
Contributor

This is an all-in-one PR to bump the version, apply the update to the UnRAR library, apply 2 patches to make it work with our codebase, and update the release notes.

If any other backports or fixes are required they can be pushed to this branch/PR before release. Will be merging directly to the rel/ branch this time, for speed, rather than making a long-running dev/ branch.

I'm seeing  'error: unknown type name 'constexpr' with the UnRAR update.

It seems that C++11 must be enabled for 'constexpr' keyword to be recognized.
Because it includes rar.hpp, the UnRAR iface also uses C++11 features.
UnRAR logic replaces directory symlinks found within archive file entry
file paths with actual directories by deleting them after they're
extracted.

Unfortunately, this logic extends to deleting existing directories if you
set the `DestName` instead of the `DestPath` in this API:

  rc = RARProcessFile(hArchive, RAR_EXTRACT, NULL, destFilePath);

In the future UnRAR may change to disable the `LinksToDirs()` feature
if using the `DestName` parameter. In the meantime, this commit
completely disables it for our use case.
This is a cherry-pick of commit 24f225c

Modification to unrar codebase allowing skipping of files within
Solid archives when parsing in extraction mode, enabling us to skip
encrypted files while still scanning metadata and potentially
scanning unencrypted files later in the archive.
Prevent allocating more than 1GB regardless of what is requested.
RAR dictionary sizes may not be larger than 1GB, at least in the current
version.

This is a cherry-pick of commit 9b444e7
@micahsnyder micahsnyder merged commit 5c413ce into Cisco-Talos:rel/1.0 Aug 28, 2023
2 of 20 checks passed
@micahsnyder micahsnyder deleted the CLAM-2428-unrar-6.2.10-1.0.3 branch August 28, 2023 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants