414114b7a5f565e00fc143898a3620ddccdfc504,mmdnn/conversion/common/utils.py,,download_file,#Any#Any#Any#Any#Any#Any#,194

Before Change

    if auto_unzip:
        if ret.endswith(".tar.gz") or ret.endswith(".tgz"):
            try:
                import tarfile
                tar = tarfile.open(ret)
                tar.extractall(directory)
                tar.close()
            except:
                print("Unzip file [{}] failed.".format(ret))

        elif ret.endswith(".zip"):
            try:
                import zipfile
                zip_ref = zipfile.ZipFile(ret, "r")

After Change

                import tarfile
                tar = tarfile.open(ret)
                for name in tar.getnames():
                    if not (os.path.realpath(os.path.join(directory, name))+ os.sep).startswith(os.path.realpath(directory) + os.sep):
                        raise ValueError("The decompression path does not match the current path. For more info: https://docs.python.org/3/library/tarfile.html//tarfile.TarFile.extractall")
                tar.extractall(directory)
                tar.close()
            except ValueError:
                raise
            except:
                print("Unzip file [{}] failed.".format(ret))

        elif ret.endswith(".zip"):
            try:
                import zipfile
                zip_ref = zipfile.ZipFile(ret, "r")
                for name in zip_ref.namelist():
                    if not (os.path.realpath(os.path.join(directory, name))+ os.sep).startswith(os.path.realpath(directory) + os.sep):
                        raise ValueError("The decompression path does not match the current path. For more info: https://docs.python.org/3/library/zipfile.html?highlight=zipfile//zipfile.ZipFile.extractall")
                zip_ref.extractall(directory)
                zip_ref.close()

Instances