Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support antctl command for packetcapture #6884

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

hangyan
Copy link
Member

@hangyan hangyan commented Dec 24, 2024

TODO items:

after #3659 , the CodeQL alert should be fixed and UT coverage will also be improved.

func untarAll(reader io.Reader) error {
tarReader := tar.NewReader(reader)
for {
header, err := tarReader.Next()

Check failure

Code scanning / CodeQL

Arbitrary file access during archive extraction ("Zip Slip") High

Unsanitized archive entry, which may contain '..', is used in a file system operation.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

after #3659 is merged, this should be fixed.

@hangyan hangyan force-pushed the topic/yhang/packetcapture-antctl branch from 4a616d6 to bf4cb68 Compare January 14, 2025 09:03
Signed-off-by: Hang Yan <[email protected]>
func untarAll(reader io.Reader, dstDir string) error {
tarReader := tar.NewReader(reader)
for {
header, err := tarReader.Next()

Check failure

Code scanning / CodeQL

Arbitrary file access during archive extraction ("Zip Slip") High

Unsanitized archive entry, which may contain '..', is used in a
file system operation
.
Signed-off-by: Hang Yan <[email protected]>
@hangyan hangyan changed the title [WIP] Support antctl command for packetcapture Support antctl command for packetcapture Jan 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant