pr0v3rbs/FirmAE

Binwalk corrupts symlinks

alexsantee opened this issue · 2 comments

I've installed FirmAE on a Linux Mint 20.1 which already had binwalk installed. I've used the build.sh and install.sh scripts, but I'm not sure if FirmAE is using the system's Binwalk or if it's using another.

At extraction binwalk shows this warning message of converting an external symlink to /dev/null, which I think is bad for the emulation:

WARNING: Symlink points outside of the extraction directory: /tmp/tmpbeeef6ux/_openwrt-21.02.1-ramips-mt76x8-tplink_tl-wr840n-v4-squashfs-sysupgrade.bin.extracted/squashfs-root/sbin/modinfo -> /usr/sbin/kmodloader; changing link target to /dev/null for security purposes.

In a chroot or emulated environment this security risk shouldn't apply

Currently I'm using the --preserve-symlinks flag for binwalk at the extractor script

Sorry for the late.

Currently, because of some issues, FirmAE uses Binwalk with 2.3.1. version. (#36 (comment))

It needs to be changed some codes with your advice.
I will check soon, thanks!

This issue was fixed in 6911f56