Support reproducible XZ Linux archives without changing runtime contents
This commit is contained in:
1 parent
193ab08f62
commit
a8080f061f
4 files changed
+33
-5
No files matched your search
@@ -25,7 +25,7 @@ def sha256(path):
|
||||
|
||||
def extract_checked(archive_path, destination):
|
||||
from package_linux import safe_name
|
||||
with tarfile.open(archive_path, "r:gz") as archive:
|
||||
with tarfile.open(archive_path, "r:*") as archive:
|
||||
members = archive.getmembers()
|
||||
if not 1 <= len(members) <= 128 or len({item.name for item in members}) != len(members):
|
||||
raise ValueError("Invalid candidate member inventory")
|
||||
|
||||
Reference in new issue
Block a user