WinRAR 7.30 Beta 2 released

1. Security related fixes:
    
   
   1. fixed a crash in unrar.dll library caused by excessive function recursion;
       
      
   2. additional output filtering in console RAR to prevent abusing special characters in file names or archive comment to hide information from users;
       
      
   3. to prevent performance degradation and excessive memory use, extraction command doesn't restore missing volumes using REV files if total number of volumes exceeds 4096 or number of missing volumes exceeds 1024.
       
      Click on REV file in WinRAR or use the command line mode "RC" command to avoid this limit;
       
      
   4. hard link extraction is blocked by default if hard link target includes symlinks. It prevents linking to a file in symlinked folder and potentially overwriting such file.
       
      By default WinRAR doesn't create symlinks pointing outside of destination folder. So overwriting a file outside of destination folder was possible only if such symlink had been created in the destination folder by another tool before starting extraction;
       
      
   5. existing symlinks are removed before overwriting to prevent utilizing link chains to create a file outside of destination path. Such link chains allowed to create a file outside of destination path in RAR version for Unix, also as in UnRAR.dll for Unix, but not in WinRAR or UnRAR.dll for Windows;
       
      
   6. Mark of the Web data wasn't set for extracted symbolic or hard links unless a link target matched one of extensions specified in "Propagate mark of the Web" option. If this option was set to "For all files", both link itself and its target properly received Mark of the Web.
       
      
   We are thankful to Mohammad Ebrahim, Wolvsec @ University of Michigan, for reporting items a) - d), to Landon Peng (Lunbun LLC) working with TrendAI Zero Day Initiative, also as to Tong Liu (Lyutoon), for reporting item e) independently and to Muhammad Awais for reporting item f).
    
   
2. New -lim<d|m|t><size> switch sets the approximate limit to disk write, memory usage and run time for RAR and WinRAR in the command line mode. Processing is aborted with exit code 15 if this limit is exceeded.
    
   
3. Data initialization takes less time when recovering a large number of missing RAR volumes using REV volumes.
    
   
4. If both -cp<profile> and -rr switches are specified in the same command, WinRAR prefers value from -rr switch. Previously it used the recovery record size stored in the profile.
    
   

About win.rar GmbH:
win.rar GmbH has been the official distributor of WinRAR and RARLAB products since February 2002 and handles all support, marketing and sales related to WinRAR & rarlab.com. win.rar GmbH is registered in Germany and is represented worldwide by local partners in more than 40 countries on six continents. win.rar's declared objective is to provide first-class quality support and to optimize its software to meet customer's requirements in accordance with their valued feedback. For more information about WinRAR and win.rar GmbH please visit our website: www.win-rar.com