Bug 351248

Summary:	ark-15.07.90 creates zip archive with parent folder structure when used from PCManFM
Product:	[Applications] ark	Reporter:	DrSlony <bugs>
Component:	general	Assignee:	Raphael Kubo da Costa <rakuco>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bugs, elvis.angelaccio, rthomsen6
Priority:	NOR
Version First Reported In:	15.07.90
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description DrSlony 2015-08-13 09:36:19 UTC

Go into /tmp/foo/ and select a bunch of files. Right-click, compress. Ark opens up. I save to /tmp/foo.zip
Open the archive - instead of just having a bunch of files, they are stored in my directory tree structure, so if I was to send this zip to someone, instead of just extracting a bunch of files they would recreate my folder structure and potentially see private information in the folder names. This is both a usability bug and a security risk.

Reproducible: Always

Comment 1 Elvis Angelaccio 2015-10-27 16:17:00 UTC

What do you mean with "my folder structure" or "directory tree structure"? Are you referring to the folder of your username? (e.g. /home/foo)?

Comment 2 DrSlony 2015-10-27 17:33:24 UTC

No. I'm referring to the folder they are in, its parent, its parent's parent, etc. The whole branch up to root. In the example above if you opened that zip file instead of seeing just a bunch of files you would see them in /tmp/.

Comment 3 DrSlony 2015-10-27 17:35:33 UTC

I'm now using dolphin-15.08.2 and ark-15.08.2, and I have no "compress" option anymore in Dolphin's context menu, so I cannot try to reproduce.

Comment 4 Elvis Angelaccio 2015-10-27 18:06:40 UTC

(In reply to DrSlony from comment #3)
> I'm now using dolphin-15.08.2 and ark-15.08.2, and I have no "compress"
> option anymore in Dolphin's context menu, so I cannot try to reproduce.
This is a bug in KIO (#350769), make sure you update to version 5.16 of KF5. Which distribution are you using?

Comment 5 DrSlony 2015-10-27 18:23:55 UTC

Gentoo. I will, when it's released. Currently I'm on kde-frameworks/kio-5.15.0

Comment 6 Elvis Angelaccio 2015-12-20 10:33:38 UTC

Have you tried again with a more recent version of Ark?

Comment 7 DrSlony 2015-12-20 11:51:09 UTC

Cannot reproduce using kde-apps-15.08.3 and kde-frameworks-5.17