Function extract_and_install_binary

src/cli/cli.c:11642–11787

}

static int extract_and_install_binary(extract_install_args_t args) {
    const char *tmp_archive = args.tmp_archive;
    const char *ext = args.ext;
    const char *bin_dest = args.bin_dest;
    FILE *f = fopen(tmp_archive, "rb");
    if (!f) {
        (void)fprintf(stderr, "error: cannot open %s\n", tmp_archive);
        return CLI_TRUE;
    }
    if (fseek(f, 0, SEEK_END) != 0) {
        (void)fclose(f);
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }
    long fsize = ftell(f);
    if (fsize <= 0 || fsize > INT_MAX || fseek(f, 0, SEEK_SET) != 0) {
        (void)fclose(f);
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }

    unsigned char *data = malloc((size_t)fsize);
    if (!data) {
        (void)fclose(f);
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }
    size_t bytes_read = fread(data, CLI_ELEM_SIZE, (size_t)fsize, f);
    int close_status = fclose(f);
    if (bytes_read != (size_t)fsize || close_status != 0) {
        free(data);
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }

    int bin_len = 0;
    unsigned char *bin_data = NULL;
    if (strcmp(ext, "tar.gz") == 0) {
        bin_data = cbm_extract_binary_from_targz(data, (int)fsize, &bin_len);
    } else {
        bin_data = cbm_extract_binary_from_zip(data, (int)fsize, &bin_len);
    }
    free(data);
    cbm_unlink(tmp_archive);

    if (!bin_data || bin_len <= 0) {
        (void)fprintf(stderr, "error: binary not found in archive\n");
        free(bin_data);
        return CLI_TRUE;
    }

    cbm_activation_transaction_t *binary_transaction = NULL;
    cbm_activation_transaction_status_t stage_status;
    cli_binary_validator_t validator = {{0}};
#ifdef __APPLE__
    /* codesign replaces the signed file on current macOS releases. Publish and
     * sign a disposable private copy first, then stage the resulting immutable
     * bytes into the final transaction. */