[issue6972] zipfile.ZipFile overwrites files outside destination path

[Serhiy Storchaka]

Serhiy Storchaka added the comment:

Here is a patch based on patch for issue10905. Test included (I have removed some old tests as new one supersede them). Please test on Windows.

".." components, leading slashes, drive letter, etc are just dropped, as in unzip or 7-Zip. Thanks Zhigang Wang for original patch and research.

----------
keywords: +needs review
stage: needs patch -> 
versions: +Python 3.4
Added file: http://bugs.python.org/file27661/zipfile_fix_arcname_2.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue6972>
_______________________________________