@theia/filesystem 1.77.0-next.99 → 1.77.0

package/lib/node/archive/archive-extractor.js

@@ -0,0 +1,290 @@
+// *****************************************************************************
+// Copyright (C) 2026 EclipseSource GmbH and others.
+//
+// This program and the accompanying materials are made available under the
+// terms of the Eclipse Public License v. 2.0 which is available at
+// http://www.eclipse.org/legal/epl-2.0.
+//
+// This Source Code may also be made available under the following Secondary
+// Licenses when the conditions for such availability set forth in the Eclipse
+// Public License v. 2.0 are satisfied: GNU General Public License, version 2
+// with the GNU Classpath Exception which is available at
+// https://www.gnu.org/software/classpath/license.html.
+//
+// SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
+// *****************************************************************************
+import { __decorate } from "tslib";
+import * as fs from 'fs';
+import * as path from 'path';
+import { Readable } from 'stream';
+import { pipeline } from 'stream/promises';
+import { createGunzip } from 'zlib';
+import * as yauzl from 'yauzl';
+import * as tarStream from 'tar-stream';
+import { inject, injectable, named } from '@theia/core/shared/inversify';
+import { ILogger } from '@theia/core/lib/common/logger';
+export const ArchiveExtractor = Symbol('ArchiveExtractor');
+const S_IFMT = 0o170000;
+const S_IFREG = 0o100000;
+const S_IFDIR = 0o040000;
+const PERMISSION_BITS = 0o777;
+/**
+ * Existing links are rejected before a file is opened; `O_NOFOLLOW` additionally guards against a link created in between
+ * where the platform supports it, which Windows does not.
+ */
+const WRITE_FLAGS = fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_TRUNC | (fs.constants.O_NOFOLLOW ?? 0);
+let ArchiveExtractorImpl = class ArchiveExtractorImpl {
+    async extract(source, destination, options = {}) {
+        await fs.promises.mkdir(destination, { recursive: true });
+        const root = await fs.promises.realpath(destination);
+        const verifiedDirectories = new Set([root]);
+        const entries = [];
+        const skipped = [];
+        await this.readEntries(source, options.format, async (entry) => {
+            const entryPath = this.toEntryPath(entry.name);
+            if (!entryPath) {
+                return;
+            }
+            if (entry.kind === 'unsupported') {
+                skipped.push(entryPath);
+                return;
+            }
+            const target = path.join(root, ...entryPath.split('/'));
+            if (entry.kind === 'directory') {
+                await this.createDirectory(root, target, verifiedDirectories);
+                entries.push({ path: entryPath, type: 'directory', mode: entry.mode });
+            }
+            else {
+                await this.createDirectory(root, path.dirname(target), verifiedDirectories);
+                await this.assertNoLink(root, target);
+                await this.writeFile(target, await entry.open(), entry.mode);
+                entries.push({ path: entryPath, type: 'file', mode: entry.mode });
+            }
+        });
+        this.reportSkipped(source, skipped);
+        return entries;
+    }
+    async readFiles(source, options = {}) {
+        const files = [];
+        const skipped = [];
+        await this.readEntries(source, options.format, async (entry) => {
+            const entryPath = this.toEntryPath(entry.name);
+            if (entryPath && entry.kind === 'unsupported') {
+                skipped.push(entryPath);
+            }
+            if (!entryPath || entry.kind !== 'file' || (options.filter && !options.filter(entryPath))) {
+                return;
+            }
+            const chunks = [];
+            for await (const chunk of await entry.open()) {
+                chunks.push(chunk);
+            }
+            files.push({ path: entryPath, type: 'file', mode: entry.mode, data: Buffer.concat(chunks) });
+        });
+        this.reportSkipped(source, skipped);
+        return files;
+    }
+    async readEntries(source, format, visit) {
+        switch (format ?? await this.detectFormat(source)) {
+            case 'zip':
+                return this.readZipEntries(source, visit);
+            case 'tar':
+                return this.readTarEntries(source, false, visit);
+            case 'tgz':
+                return this.readTarEntries(source, true, visit);
+        }
+    }
+    /**
+     * Detects the format of an archive from its first bytes.
+     */
+    async detectFormat(source) {
+        const header = await this.readHeader(source, 512);
+        if (header.length >= 4 && header[0] === 0x50 && header[1] === 0x4b && ((header[2] === 0x03 && header[3] === 0x04) || (header[2] === 0x05 && header[3] === 0x06))) {
+            return 'zip';
+        }
+        if (header.length >= 2 && header[0] === 0x1f && header[1] === 0x8b) {
+            return 'tgz';
+        }
+        if (header.length >= 262 && header.toString('latin1', 257, 262) === 'ustar') {
+            return 'tar';
+        }
+        throw new Error(`Unsupported archive format${typeof source === 'string' ? `: ${source}` : ''}`);
+    }
+    async readHeader(source, length) {
+        if (typeof source !== 'string') {
+            return Buffer.from(source.subarray(0, length));
+        }
+        const handle = await fs.promises.open(source, 'r');
+        try {
+            const buffer = Buffer.alloc(length);
+            const { bytesRead } = await handle.read(buffer, 0, length, 0);
+            return buffer.subarray(0, bytesRead);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    async readZipEntries(source, visit) {
+        const zipFile = typeof source === 'string'
+            ? await yauzl.openPromise(source)
+            : await yauzl.fromBufferPromise(Buffer.from(source));
+        try {
+            for await (const entry of zipFile.eachEntry()) {
+                // The upper 16 bits hold the Unix mode if the archive was created on a Unix system, and are 0 otherwise.
+                const unixMode = entry.externalFileAttributes >>> 16;
+                const fileType = unixMode & S_IFMT;
+                let kind;
+                if (entry.fileName.endsWith('/') || fileType === S_IFDIR) {
+                    kind = 'directory';
+                }
+                else if (fileType === 0 || fileType === S_IFREG) {
+                    kind = 'file';
+                }
+                else {
+                    kind = 'unsupported';
+                }
+                await visit({
+                    name: entry.fileName,
+                    kind,
+                    mode: this.toMode(unixMode),
+                    open: () => zipFile.openReadStreamPromise(entry)
+                });
+            }
+        }
+        finally {
+            if (zipFile.isOpen) {
+                zipFile.close();
+            }
+        }
+    }
+    async readTarEntries(source, gzipped, visit) {
+        const input = typeof source === 'string' ? fs.createReadStream(source) : Readable.from([Buffer.from(source)]);
+        const extract = tarStream.extract();
+        const streams = gzipped ? [createGunzip()] : [];
+        // Resolves with the error instead of rejecting, so that a failure is not unhandled while entries are visited.
+        const feeding = pipeline([input, ...streams, extract]).then(() => undefined, (reason) => reason);
+        try {
+            for await (const entry of extract) {
+                const header = entry.header;
+                let kind;
+                if (header.type === 'file' || header.type === 'contiguous-file') {
+                    kind = 'file';
+                }
+                else if (header.type === 'directory') {
+                    kind = 'directory';
+                }
+                else {
+                    kind = 'unsupported';
+                }
+                let consumed = false;
+                await visit({
+                    name: header.name,
+                    kind,
+                    mode: this.toMode(header.mode),
+                    open: async () => {
+                        consumed = true;
+                        // Entries are not Node streams: Node's `pipeline` would wait forever for an entry that a failing archive
+                        // already destroyed, while a stream created from the entry fails.
+                        return Readable.from(entry);
+                    }
+                });
+                if (!consumed) {
+                    entry.resume();
+                }
+            }
+        }
+        catch (error) {
+            input.destroy();
+            await feeding;
+            throw error;
+        }
+        const feedError = await feeding;
+        if (feedError) {
+            throw feedError;
+        }
+    }
+    /**
+     * Normalizes the name of an entry to a relative path with `/` as separator.
+     * @returns `undefined` for the archive root.
+     * @throws if the name is absolute or leaves the archive root.
+     */
+    toEntryPath(name) {
+        const normalized = name.replace(/\\/g, '/');
+        if (normalized.startsWith('/') || /^[a-zA-Z]:/.test(normalized)) {
+            throw new Error(`Archive entry has an absolute path: ${name}`);
+        }
+        const segments = normalized.split('/').filter(segment => segment && segment !== '.');
+        if (segments.includes('..')) {
+            throw new Error(`Archive entry leaves the extraction directory: ${name}`);
+        }
+        return segments.length > 0 ? segments.join('/') : undefined;
+    }
+    toMode(mode) {
+        const permissions = (mode ?? 0) & PERMISSION_BITS;
+        return permissions || undefined;
+    }
+    /**
+     * Creates a directory below the root one segment at a time and refuses to descend into an existing entry that is not
+     * a directory, so that nothing is created or written through a link that already existed in the destination.
+     */
+    async createDirectory(root, directory, verifiedDirectories) {
+        let current = root;
+        for (const segment of path.relative(root, directory).split(path.sep)) {
+            current = path.join(current, segment);
+            if (verifiedDirectories.has(current)) {
+                continue;
+            }
+            try {
+                await fs.promises.mkdir(current);
+            }
+            catch (error) {
+                if (error.code !== 'EEXIST') {
+                    throw error;
+                }
+                if (!(await fs.promises.lstat(current)).isDirectory()) {
+                    throw new Error(`Archive entry leaves the extraction directory: ${path.relative(root, current)}`);
+                }
+            }
+            verifiedDirectories.add(current);
+        }
+    }
+    /**
+     * Rejects writing a file over an existing link or special file, which could point outside of the destination.
+     */
+    async assertNoLink(root, target) {
+        const existing = await fs.promises.lstat(target).catch((error) => {
+            if (error.code === 'ENOENT') {
+                return undefined;
+            }
+            throw error;
+        });
+        if (existing && !existing.isFile()) {
+            throw new Error(`Archive entry would be written through a link or special file: ${path.relative(root, target)}`);
+        }
+    }
+    async writeFile(target, content, mode) {
+        const handle = await fs.promises.open(target, WRITE_FLAGS, mode ?? 0o666);
+        await pipeline(content, handle.createWriteStream());
+    }
+    reportSkipped(source, skipped) {
+        if (skipped.length > 0) {
+            const message = `Skipped ${skipped.length} link or special entries of archive${typeof source === 'string' ? ` ${source}` : ''}: ${skipped.join(', ')}`;
+            if (this.logger) {
+                this.logger.warn(message);
+            }
+            else {
+                // eslint-disable-next-line @theia/named-logger-check
+                console.warn(message);
+            }
+        }
+    }
+};
+__decorate([
+    inject(ILogger),
+    named('filesystem:ArchiveExtractorImpl')
+], ArchiveExtractorImpl.prototype, "logger", void 0);
+ArchiveExtractorImpl = __decorate([
+    injectable()
+], ArchiveExtractorImpl);
+export { ArchiveExtractorImpl };
+//# sourceMappingURL=archive-extractor.js.map

package/lib/node/archive/archive-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-extractor.js","sourceRoot":"","sources":["../../../src/node/archive/archive-extractor.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,oDAAoD;AACpD,EAAE;AACF,2EAA2E;AAC3E,mEAAmE;AACnE,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,uDAAuD;AACvD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;;AAEhF,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,KAAK,SAAS,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AA8BxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AA+B3D,MAAM,MAAM,GAAG,QAAQ,CAAC;AACxB,MAAM,OAAO,GAAG,QAAQ,CAAC;AACzB,MAAM,OAAO,GAAG,QAAQ,CAAC;AACzB,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;GAGG;AACH,MAAM,WAAW,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAGlH,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAM7B,KAAK,CAAC,OAAO,CAAC,MAAqB,EAAE,WAAmB,EAAE,UAA0B,EAAE;QAClF,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACzD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO;YACX,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;gBAC5E,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACtC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAqB,EAAE,UAA8B,EAAE;QACnE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACzD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACxF,OAAO;YACX,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAES,KAAK,CAAC,WAAW,CAAC,MAAqB,EAAE,MAAiC,EAAE,KAA6B;QAC/G,QAAQ,MAAM,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,KAAK,KAAK;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9C,KAAK,KAAK;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACrD,KAAK,KAAK;gBACN,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY,CAAC,MAAqB;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/J,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,MAAqB,EAAE,MAAc;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACP,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACL,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,MAAqB,EAAE,KAA6B;QAC/E,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,QAAQ;YACtC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC;YACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5C,yGAAyG;gBACzG,MAAM,QAAQ,GAAG,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;gBACnC,IAAI,IAA6B,CAAC;gBAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACvD,IAAI,GAAG,WAAW,CAAC;gBACvB,CAAC;qBAAM,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChD,IAAI,GAAG,MAAM,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACJ,IAAI,GAAG,aAAa,CAAC;gBACzB,CAAC;gBACD,MAAM,KAAK,CAAC;oBACR,IAAI,EAAE,KAAK,CAAC,QAAQ;oBACpB,IAAI;oBACJ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC3B,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC;iBACnD,CAAC,CAAC;YACP,CAAC;QACL,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;QACL,CAAC;IACL,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,MAAqB,EAAE,OAAgB,EAAE,KAA6B;QACjG,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,OAAO,GAA6B,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,8GAA8G;QAC9G,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,OAAO,EAAE,OAA2C,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9I,IAAI,CAAC;YACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,IAA6B,CAAC;gBAClC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC9D,IAAI,GAAG,MAAM,CAAC;gBAClB,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACrC,IAAI,GAAG,WAAW,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACJ,IAAI,GAAG,aAAa,CAAC;gBACzB,CAAC;gBACD,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,KAAK,CAAC;oBACR,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI;oBACJ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC9B,IAAI,EAAE,KAAK,IAAI,EAAE;wBACb,QAAQ,GAAG,IAAI,CAAC;wBAChB,yGAAyG;wBACzG,kEAAkE;wBAClE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAChC,CAAC;iBACJ,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,KAAK,CAAC,MAAM,EAAE,CAAC;gBACnB,CAAC;YACL,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,OAAO,CAAC;YACd,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;QAChC,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC;QACpB,CAAC;IACL,CAAC;IAED;;;;OAIG;IACO,WAAW,CAAC,IAAY;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;QACrF,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAES,MAAM,CAAC,IAAwB;QACrC,MAAM,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC;QAClD,OAAO,WAAW,IAAI,SAAS,CAAC;IACpC,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,SAAiB,EAAE,mBAAgC;QAC7F,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,SAAS;YACb,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,MAAM,KAAK,CAAC;gBAChB,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtG,CAAC;YACL,CAAC;YACD,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAAc;QACrD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;IACL,CAAC;IAES,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAiB,EAAE,IAAwB;QACjF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC;QAC1E,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxD,CAAC;IAES,aAAa,CAAC,MAAqB,EAAE,OAAiB;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,WAAW,OAAO,CAAC,MAAM,sCAAsC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvJ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACJ,qDAAqD;gBACrD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC;IACL,CAAC;CACJ,CAAA;AAxPsB;IADlB,MAAM,CAAC,OAAO,CAAC;IAAE,KAAK,CAAC,iCAAiC,CAAC;oDACtB;AAJ3B,oBAAoB;IADhC,UAAU,EAAE;GACA,oBAAoB,CA4PhC"}

package/lib/node/archive/archive-extractor.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=archive-extractor.spec.d.ts.map

package/lib/node/archive/archive-extractor.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-extractor.spec.d.ts","sourceRoot":"","sources":["../../../src/node/archive/archive-extractor.spec.ts"],"names":[],"mappings":""}

package/lib/node/archive/archive-extractor.spec.js

@@ -0,0 +1,317 @@
+// *****************************************************************************
+// Copyright (C) 2026 EclipseSource GmbH and others.
+//
+// This program and the accompanying materials are made available under the
+// terms of the Eclipse Public License v. 2.0 which is available at
+// http://www.eclipse.org/legal/epl-2.0.
+//
+// This Source Code may also be made available under the following Secondary
+// Licenses when the conditions for such availability set forth in the Eclipse
+// Public License v. 2.0 are satisfied: GNU General Public License, version 2
+// with the GNU Classpath Exception which is available at
+// https://www.gnu.org/software/classpath/license.html.
+//
+// SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0
+// *****************************************************************************
+import * as fs from 'fs';
+import { randomBytes } from 'crypto';
+import * as os from 'os';
+import * as path from 'path';
+import { expect } from 'chai';
+import * as sinon from 'sinon';
+import { ArchiveExtractorImpl } from './archive-extractor.js';
+import { createTestTar, createTestZip } from './test/test-archives.js';
+const isWindows = process.platform === 'win32';
+describe('ArchiveExtractorImpl', () => {
+    let workspace;
+    let destination;
+    let outside;
+    let warnings;
+    class TestArchiveExtractor extends ArchiveExtractorImpl {
+        constructor() {
+            super(...arguments);
+            this.logger = { warn: (message) => warnings.push(message) };
+        }
+    }
+    const extractor = new TestArchiveExtractor();
+    beforeEach(async () => {
+        workspace = await fs.promises.mkdtemp(path.join(os.tmpdir(), 'archive-extractor-'));
+        destination = path.join(workspace, 'out');
+        outside = path.join(workspace, 'outside');
+        await fs.promises.mkdir(outside);
+        warnings = [];
+    });
+    afterEach(async () => {
+        await fs.promises.rm(workspace, { recursive: true, force: true });
+    });
+    async function expectRejection(promise, message) {
+        try {
+            await promise;
+        }
+        catch (error) {
+            expect(String(error)).to.match(message);
+            return;
+        }
+        expect.fail('Expected the promise to be rejected');
+    }
+    async function listFiles(directory) {
+        const entries = await fs.promises.readdir(directory, { recursive: true });
+        return entries.map(entry => entry.split(path.sep).join('/')).sort();
+    }
+    /** Creating a file link on Windows requires elevated rights or developer mode. */
+    async function createFileLink(target, link) {
+        try {
+            await fs.promises.symlink(target, link, 'file');
+            return true;
+        }
+        catch (error) {
+            if (isWindows && error.code === 'EPERM') {
+                return false;
+            }
+            throw error;
+        }
+    }
+    async function writeArchive(name, content) {
+        const archivePath = path.join(workspace, name);
+        await fs.promises.writeFile(archivePath, content);
+        return archivePath;
+    }
+    const formats = [
+        {
+            name: 'zip',
+            create: async (entries) => createTestZip(entries.map(entry => ({
+                name: entry.type === 'directory' ? entry.name + '/' : entry.name,
+                mode: (entry.type === 'directory' ? 0o040000 : 0o100000) | (entry.mode ?? (entry.type === 'directory' ? 0o755 : 0o644)),
+                data: entry.data
+            })))
+        },
+        { name: 'tar', create: entries => createTestTar(entries) },
+        { name: 'tgz', create: entries => createTestTar(entries, true) }
+    ];
+    for (const format of formats) {
+        describe(format.name, () => {
+            it('extracts files and directories from a path', async () => {
+                const archive = await writeArchive(`archive.${format.name}`, await format.create([
+                    { name: 'extension', type: 'directory' },
+                    { name: 'extension/package.json', data: '{}' },
+                    { name: 'extension/nested/file.txt', data: 'content' }
+                ]));
+                const entries = await extractor.extract(archive, destination);
+                expect(entries.map(entry => `${entry.type}:${entry.path}`)).to.deep.equal([
+                    'directory:extension',
+                    'file:extension/package.json',
+                    'file:extension/nested/file.txt'
+                ]);
+                expect(await fs.promises.readFile(path.join(destination, 'extension', 'nested', 'file.txt'), 'utf8')).to.equal('content');
+            });
+            it('extracts from a buffer', async () => {
+                await extractor.extract(await format.create([{ name: 'file.txt', data: 'content' }]), destination);
+                expect(await fs.promises.readFile(path.join(destination, 'file.txt'), 'utf8')).to.equal('content');
+            });
+            it('reads the selected files without extracting', async () => {
+                const archive = await format.create([
+                    { name: 'extension/package.json', data: '{"name":"test"}' },
+                    { name: 'extension/README.md', data: 'readme' }
+                ]);
+                const files = await extractor.readFiles(archive, { filter: entryPath => entryPath === 'extension/package.json' });
+                expect(files.map(file => [file.path, file.data.toString('utf8')])).to.deep.equal([['extension/package.json', '{"name":"test"}']]);
+                expect(fs.existsSync(destination)).to.be.false;
+            });
+            (isWindows ? it.skip : it)('keeps permission bits but strips setuid, setgid and sticky bits', async () => {
+                const entries = await extractor.extract(await format.create([
+                    { name: 'run.sh', mode: 0o755, data: '#!/bin/sh' },
+                    { name: 'setuid', mode: 0o7755, data: 'evil' }
+                ]), destination);
+                expect(entries.map(entry => entry.mode)).to.deep.equal([0o755, 0o755]);
+                expect((await fs.promises.stat(path.join(destination, 'run.sh'))).mode & 0o7777).to.equal(0o755 & ~process.umask());
+                expect((await fs.promises.stat(path.join(destination, 'setuid'))).mode & 0o7000).to.equal(0);
+            });
+            it('rejects an entry that leaves the destination', async () => {
+                const archive = await format.create([{ name: '../outside/evil.txt', data: 'evil' }]);
+                await expectRejection(extractor.extract(archive, destination), /invalid relative path|leaves the extraction directory/);
+                expect(await listFiles(outside)).to.be.empty;
+            });
+            it('rejects an entry with an absolute path', async () => {
+                const target = path.join(outside, 'evil.txt').split(path.sep).join('/');
+                await expectRejection(extractor.extract(await format.create([{ name: target, data: 'evil' }]), destination), /absolute path/);
+                expect(await listFiles(outside)).to.be.empty;
+            });
+            it('does not write through a symlinked directory in the destination', async () => {
+                await fs.promises.mkdir(destination);
+                await fs.promises.symlink(outside, path.join(destination, 'link'), 'junction');
+                await expectRejection(extractor.extract(await format.create([{ name: 'link/evil.txt', data: 'evil' }]), destination), /leaves the extraction directory/);
+                expect(await listFiles(outside)).to.be.empty;
+            });
+            it('does not create directories through a symlinked directory in the destination', async () => {
+                await fs.promises.mkdir(destination);
+                await fs.promises.symlink(outside, path.join(destination, 'link'), 'junction');
+                await expectRejection(extractor.extract(await format.create([{ name: 'link/new-directory/evil.txt', data: 'evil' }]), destination), /leaves the extraction directory/);
+                expect(await listFiles(outside)).to.be.empty;
+            });
+            it('does not write through a symlinked file in the destination', async function () {
+                const target = path.join(outside, 'target.txt');
+                await fs.promises.writeFile(target, 'original');
+                await fs.promises.mkdir(destination);
+                if (!await createFileLink(target, path.join(destination, 'file.txt'))) {
+                    this.skip();
+                }
+                await expectRejection(extractor.extract(await format.create([{ name: 'file.txt', data: 'evil' }]), destination), /written through a link/);
+                expect(await fs.promises.readFile(target, 'utf8')).to.equal('original');
+            });
+            it('does not write a file whose existing target cannot be inspected', async () => {
+                await fs.promises.mkdir(destination);
+                const target = path.join(await fs.promises.realpath(destination), 'file.txt');
+                await fs.promises.writeFile(target, 'original');
+                const lstat = sinon.stub(fs.promises, 'lstat').callThrough();
+                lstat.withArgs(target).rejects(Object.assign(new Error('EACCES: permission denied'), { code: 'EACCES' }));
+                try {
+                    await expectRejection(extractor.extract(await format.create([{ name: 'file.txt', data: 'evil' }]), destination), /EACCES/);
+                }
+                finally {
+                    lstat.restore();
+                }
+                expect(await fs.promises.readFile(target, 'utf8')).to.equal('original');
+            });
+            it('accepts names that start with two dots', async () => {
+                await extractor.extract(await format.create([
+                    { name: '..config/settings.json', data: '{}' },
+                    { name: '..hidden', data: 'hidden' }
+                ]), destination);
+                expect(await listFiles(destination)).to.deep.equal(['..config', '..config/settings.json', '..hidden']);
+            });
+            it('creates parent directories that have no entry of their own', async () => {
+                const entries = await extractor.extract(await format.create([{ name: 'a/b/c.txt', data: 'content' }]), destination);
+                expect(entries.map(entry => entry.path)).to.deep.equal(['a/b/c.txt']);
+                expect(await fs.promises.readFile(path.join(destination, 'a', 'b', 'c.txt'), 'utf8')).to.equal('content');
+            });
+            it('overwrites existing files in the destination', async () => {
+                await fs.promises.mkdir(destination);
+                await fs.promises.writeFile(path.join(destination, 'file.txt'), 'old content that is longer');
+                await extractor.extract(await format.create([{ name: 'file.txt', data: 'new' }]), destination);
+                expect(await fs.promises.readFile(path.join(destination, 'file.txt'), 'utf8')).to.equal('new');
+            });
+            it('extracts long entry names', async () => {
+                const longName = ['a'.repeat(80), 'b'.repeat(80), 'c'.repeat(80), 'file.txt'].join('/');
+                await extractor.extract(await format.create([{ name: longName, data: 'long' }]), destination);
+                expect(await fs.promises.readFile(path.join(destination, ...longName.split('/')), 'utf8')).to.equal('long');
+            });
+            it('extracts a large file', async () => {
+                const data = randomBytes(3 * 1024 * 1024).toString('base64');
+                await extractor.extract(await format.create([{ name: 'large.txt', data }]), destination);
+                expect(await fs.promises.readFile(path.join(destination, 'large.txt'), 'utf8')).to.equal(data);
+            });
+            it('rejects a truncated archive', async () => {
+                const archive = await format.create([{ name: 'file.txt', data: randomBytes(64 * 1024).toString('base64') }]);
+                await expectRejection(extractor.extract(archive.subarray(0, archive.length / 2), destination), /end of (central directory|data|file)/i);
+            });
+            it('extracts an empty archive', async () => {
+                const entries = await extractor.extract(await format.create([]), destination, { format: format.name });
+                expect(entries).to.be.empty;
+                expect(await listFiles(destination)).to.be.empty;
+            });
+            (process.platform === 'linux' ? it : it.skip)('closes the archive file after a failed extraction', async () => {
+                const archive = await writeArchive(`archive.${format.name}`, await format.create([
+                    { name: 'file.txt', data: 'content' },
+                    { name: '../outside/evil.txt', data: 'evil' }
+                ]));
+                const openBefore = (await fs.promises.readdir('/proc/self/fd')).length;
+                await expectRejection(extractor.extract(archive, destination), /invalid relative path|leaves the extraction directory/);
+                expect((await fs.promises.readdir('/proc/self/fd')).length).to.equal(openBefore);
+            });
+        });
+    }
+    describe('zip entries', () => {
+        (isWindows ? it.skip : it)('uses default permissions for entries without a Unix mode', async () => {
+            const entries = await extractor.extract(createTestZip([{ name: 'file.txt', mode: 0, data: 'content' }]), destination);
+            expect(entries.map(entry => entry.mode)).to.deep.equal([undefined]);
+            expect((await fs.promises.stat(path.join(destination, 'file.txt'))).mode & 0o777).to.equal(0o666 & ~process.umask());
+        });
+        it('accepts backslashes as separators', async () => {
+            await extractor.extract(createTestZip([{ name: 'dir\\file.txt', data: 'content' }]), destination);
+            expect(await listFiles(destination)).to.deep.equal(['dir', 'dir/file.txt']);
+        });
+        it('rejects an entry that leaves the destination with backslashes', async () => {
+            await expectRejection(extractor.extract(createTestZip([{ name: '..\\outside\\evil.txt', data: 'evil' }]), destination), /invalid relative path|leaves the extraction directory/);
+            expect(await listFiles(outside)).to.be.empty;
+        });
+    });
+    describe('zip links', () => {
+        it('skips a symlink entry', async () => {
+            const entries = await extractor.extract(createTestZip([
+                { name: 'link', mode: 0o120777, data: outside },
+                { name: 'file.txt', data: 'content' }
+            ]), destination);
+            expect(entries.map(entry => entry.path)).to.deep.equal(['file.txt']);
+            expect(await listFiles(destination)).to.deep.equal(['file.txt']);
+            expect(warnings.join()).to.contain('link');
+        });
+        it('keeps a file inside the destination when it follows a symlink entry of the same name', async () => {
+            await extractor.extract(createTestZip([
+                { name: 'link', mode: 0o120777, data: outside },
+                { name: 'link/evil.txt', data: 'evil' }
+            ]), destination);
+            expect(await listFiles(destination)).to.deep.equal(['link', 'link/evil.txt']);
+            expect(await listFiles(outside)).to.be.empty;
+        });
+    });
+    describe('tar links', () => {
+        it('skips a chain of symlink entries', async () => {
+            await extractor.extract(await createTestTar([
+                { name: 'a', type: 'symlink', linkname: '..' },
+                { name: 'a/b', type: 'symlink', linkname: '../outside' },
+                { name: 'a/b/evil.txt', data: 'evil' }
+            ]), destination);
+            expect(await listFiles(destination)).to.deep.equal(['a', 'a/b', 'a/b/evil.txt']);
+            expect(await listFiles(outside)).to.be.empty;
+        });
+        it('skips a hardlink entry', async () => {
+            const target = path.join(outside, 'secret.txt');
+            await fs.promises.writeFile(target, 'secret');
+            const entries = await extractor.extract(await createTestTar([
+                { name: 'secret.txt', type: 'link', linkname: target },
+                { name: 'file.txt', data: 'content' }
+            ]), destination);
+            expect(entries.map(entry => entry.path)).to.deep.equal(['file.txt']);
+            expect(await listFiles(destination)).to.deep.equal(['file.txt']);
+            expect(warnings.join()).to.contain('secret.txt');
+        });
+        it('skips special entries', async () => {
+            const entries = await extractor.extract(await createTestTar([
+                { name: 'pipe', type: 'fifo' },
+                { name: 'file.txt', data: 'content' }
+            ]), destination);
+            expect(entries.map(entry => entry.path)).to.deep.equal(['file.txt']);
+        });
+        it('reports links that are skipped while reading files', async () => {
+            const files = await extractor.readFiles(await createTestTar([
+                { name: 'link', type: 'symlink', linkname: '/etc/passwd' },
+                { name: 'file.txt', data: 'content' }
+            ]));
+            expect(files.map(file => file.path)).to.deep.equal(['file.txt']);
+            expect(warnings.join()).to.contain('link');
+        });
+        it('reports skipped entries on the console without a logger', async () => {
+            const warn = sinon.stub(console, 'warn');
+            try {
+                await new ArchiveExtractorImpl().extract(await createTestTar([
+                    { name: 'link', type: 'symlink', linkname: '/etc/passwd' },
+                    { name: 'file.txt', data: 'content' }
+                ]), destination);
+                expect(warn.calledOnceWith('Skipped 1 link or special entries of archive: link')).to.be.true;
+            }
+            finally {
+                warn.restore();
+            }
+        });
+    });
+    it('rejects an unsupported format', async () => {
+        await expectRejection(extractor.extract(Buffer.from('not an archive'), destination), /Unsupported archive format/);
+    });
+    it('rejects a header that only resembles a zip signature', async () => {
+        await expectRejection(extractor.extract(Buffer.from('PK\x03\x06 not an archive', 'latin1'), destination), /Unsupported archive format/);
+    });
+    it('uses the given format instead of detecting it', async () => {
+        await expectRejection(extractor.extract(createTestZip([{ name: 'file.txt' }]), destination, { format: 'tgz' }), /incorrect header check/);
+    });
+});
+//# sourceMappingURL=archive-extractor.spec.js.map