From b611804b9f18e79e2a038b004df06fac1a63616f Mon Sep 17 00:00:00 2001
From: sysy <2772196789@qq.com>
Date: Sat, 18 Jul 2026 11:34:22 -0400
Subject: [PATCH] Fix path traversal in tar/zip extraction

Validate archive member names before extraction to prevent
directory traversal via crafted ../  entries.
---
 paddlespeech/cli/download.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/paddlespeech/cli/download.py b/paddlespeech/cli/download.py
index e77a05d2e..c93db2654 100644
--- a/paddlespeech/cli/download.py
+++ b/paddlespeech/cli/download.py
@@ -250,6 +250,11 @@ def _uncompress_file_zip(filepath):
 
     file_dir = os.path.dirname(filepath)
 
+    for name in file_list:
+        if os.path.isabs(name) or '..' in name.split('/'):
+            raise ValueError(
+                "Path traversal detected in zip member: {}".format(name))
+
     if _is_a_single_file(file_list):
         rootpath = file_list[0]
         uncompressed_path = os.path.join(file_dir, rootpath)
@@ -281,6 +286,11 @@ def _uncompress_file_tar(filepath, mode="r:*"):
     files = tarfile.open(filepath, mode)
     file_list = files.getnames()
 
+    for name in file_list:
+        if os.path.isabs(name) or '..' in name.split('/'):
+            raise ValueError(
+                "Path traversal detected in tar member: {}".format(name))
+
     file_dir = os.path.dirname(filepath)
 
     if _is_a_single_file(file_list):