Menu

#1394 Bug in renaming files & folder inside an archive by 7-zip file manager

open
nobody
None
5
2014-01-25
2014-01-25
SST
No

7-zip file manager indirectly, allows the creation of folders inside an archive with invalid and potentially dangerous names "." and ".." that are reserved for SELF and PARENT folders. It also allows the files and folders names inside an archive to include invalid characters (\ / : * ? " < > |)

This is the procedure to create SELF(.) and PARENT(..) folders inside an archive:
rename a file or folder to "..\NewName"
After that, a folder with ".." name will be created and the renamed file or folder will be moved to the newly created folder ("..")

I found this bug when I was trying to find a workaround for a missing feature in 7-zip file manager.
unfortunately, the z-zip file manager doest not support (at least directly) to move(copy) files and folders inside an archive. for example to move file and folders from folder 1 to folder 2
but this can be done indirectly in the file manager by renaming the file or folder we want to move.
for example: if we want to move a file that is named "Test.txt" to a folder that is located in same folder as our file and it is named "MyFolder", we just need to rename the file "Test.txt" to "MyFolder\Test.txt"
The bug apeared when I was trying to move the file one level up in directory tree by renaming the file to "..\Test.txt"

a sample 7z archive is attached.

1 Attachments

Discussion


Log in to post a comment.

MongoDB Logo MongoDB