1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
#!/bin/sh
set -eu
# Copyright (C) 2024-2026, Benjamin Drung <bdrung@posteo.de>
# SPDX-License-Identifier: ISC
# Generate the test cpio files
export SOURCE_DATE_EPOCH=1713104326
# Generate the test data
generate_cpio() {
input_dir="$1"
find "$input_dir" -depth -exec touch --no-dereference --date="@${SOURCE_DATE_EPOCH}" {} \;
{ cd "$input_dir"; find .; } | LC_ALL=C sort \
| cpio --owner "+0:+0" --reproducible --quiet -o -H newc -D "$input_dir"
}
cd "$(dirname "$0")"
input="$(mktemp -d "${TMPDIR-/tmp}/3cpio_XXXXXX")"
trap 'rm -rf "${input}"' 0 1 2 3 6
mkdir -p "$input/single/path"
echo "content" > "$input/single/path/file"
generate_cpio "${input}/single" > single.cpio
mkdir -p "$input/shell/usr/bin/"
echo "This is a fake busybox binary to simulate a POSIX shell" > "$input/shell/usr/bin/sh"
ln -s sh "$input/shell/usr/bin/ash"
generate_cpio "${input}/shell" > shell.cpio
touch --date="@${SOURCE_DATE_EPOCH}" shell.cpio
mkdir -p "$input/bigdata"
dd bs=1000 count=102500 if=/dev/zero of="$input/bigdata/zeros"
generate_cpio "${input}/bigdata" > "$input/bigdata.cpio"
touch --date="@${SOURCE_DATE_EPOCH}" "$input/bigdata.cpio"
cp single.cpio bzip2.cpio
bzip2 -9 < shell.cpio >> bzip2.cpio
cp single.cpio gzip.cpio
gzip -n -9 < shell.cpio >> gzip.cpio
cp single.cpio lz4.cpio
lz4 -l -9 < shell.cpio >> lz4.cpio
cp single.cpio lzma.cpio
lzma -9 < shell.cpio >> lzma.cpio
cp single.cpio lzop.cpio
lzop -9 -c shell.cpio >> lzop.cpio
cp single.cpio xz.cpio
xz --check=crc32 --threads=1 -9 < shell.cpio >> xz.cpio
cp single.cpio zstd.cpio
zstd -q -9 < shell.cpio >> zstd.cpio
cat single.cpio shell.cpio > bigdata.cpio
zstd -q -9 < "$input/bigdata.cpio" >> bigdata.cpio
mkdir "$input/path-traversal"
ln -s /tmp "$input/path-traversal/tmp"
echo "TEST Traversal" > "$input/path-traversal/tmpYtrav.txt"
generate_cpio "$input/path-traversal" | sed "s@tmpY@tmp/@g" > path-traversal.cpio
|
