[hotfix] [SECURITY] Fix Zip Slip Vulnerability

This closes #387
apache · Nov 18, 2022 · ac043ed · ac043ed
1 parent c2df467
commit ac043ed
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/...e-store-core/src/test/java/org/apache/flink/table/store/utils/CompatibilityTestUtils.java b/...e-store-core/src/test/java/org/apache/flink/table/store/utils/CompatibilityTestUtils.java
@@ -39,6 +39,9 @@ public static void unzip(String zipFileName, String targetDirectory) throws IOEx
             ZipEntry entry;
             while ((entry = zip.getNextEntry()) != null) {
                 File file = new File(targetDirectory, entry.getName());
+                if (!file.toPath().normalize().startsWith(targetDirectory)) {
+                    throw new IOException("Bad zip entry");
+                }
 
                 if (entry.isDirectory()) {
                     file.mkdirs();