3 ms·
I wonder if they are applying any sandboxing to libarchive? While it is fairly battle-tested it is still a huge chunk of C code opening often untrusted files. P
by kevincox 3y ago
I wonder if they are applying any sandboxing to libarchive? While it is fairly battle-tested it is still a huge chunk of C code opening often untrusted files. Plus many of the formats are likely rarely used and don't have the same scrutiny that the implementations of zip and tar do.