/usr/bin/dscextract is in devscripts 2.17.6+deb9u2.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 | #!/bin/sh
#   dscextract.sh - Extract a single file from a Debian source package
#   Copyright (C) 2011 Christoph Berg <myon@debian.org>
#
#   This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 2 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program; if not, write to the Free Software
#   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
set -eu
die () {
	echo "$*" >&2
	exit 2
}
setzip () {
	case $1 in
		*.gz) ZIP=--gzip ;;
		*.xz) ZIP=--xz ;;
		*.lzma) ZIP=--lzma ;;
		*.bz2) ZIP=--bzip2 ;;
	esac
}
FAST=""
while getopts "f" opt ; do
	case $opt in
		f) FAST=yes ;;
		*) exit 2 ;;
	esac
done
# shift away args
shift $(($OPTIND - 1))
[ $# = 2 ] || die "Usage: $(basename $0) <dsc> <file>"
DSC="$1"
test -e "$DSC" || die "$DSC not found"
FILE="$2"
DSCDIR=$(dirname "$DSC")
WORKDIR=$(mktemp -d --tmpdir dscextract.XXXXXX)
trap "rm -rf $WORKDIR" 0 2 3 15
if DIFFGZ=$(egrep '^ [0-9a-f]{32,64} [0-9]+ [^ ]+\.diff\.(gz|xz|lzma|bz2)$' "$DSC") ; then
	DIFFGZ=$(echo "$DIFFGZ" | cut -d ' ' -f 4 | head -n 1)
	test -e "$DSCDIR/$DIFFGZ" || die "$DSCDIR/$DIFFGZ: not found"
	filterdiff -p1 -i "$FILE" -z "$DSCDIR/$DIFFGZ" > "$WORKDIR/patch"
	if test -s "$WORKDIR/patch" ; then
		# case 1: file found in .diff.gz
		if ! grep -q '^@@ -0,0 ' "$WORKDIR/patch" ; then
			# case 1a: patch requires original file
			ORIGTGZ=$(egrep '^ [0-9a-f]{32,64} [0-9]+ [^ ]+\.orig\.tar\.(gz|xz|lzma|bz2)$' "$DSC") || die "no orig.tar.* found in $DSC"
			ORIGTGZ=$(echo "$ORIGTGZ" | cut -d ' ' -f 4 | head -n 1)
			setzip $ORIGTGZ
			test -e "$DSCDIR/$ORIGTGZ" || die "$DSCDIR/$ORIGTGZ not found"
			tar --extract --to-stdout $ZIP --file "$DSCDIR/$ORIGTGZ" --wildcards "*/$FILE" > "$WORKDIR/output" 2>/dev/null || :
			test -s "$WORKDIR/output" || die "$FILE not found in $DSCDIR/$ORIGTGZ, but required by patch"
		fi
		patch --silent "$WORKDIR/output" < "$WORKDIR/patch"
		test -s "$WORKDIR/output" || die "patch $FILE did not produce any output"
		cat "$WORKDIR/output"
		exit 0
	elif [ "$FAST" ] ; then
		# in fast mode, don't bother looking into .orig.tar.gz
		exit 1
	fi
fi
if DEBIANTARGZ=$(egrep '^ [0-9a-f]{32,64} [0-9]+ [^ ]+\.debian\.tar\.(gz|xz|lzma|bz2)$' "$DSC") ; then
	case $FILE in
		debian/*)
			DEBIANTARGZ=$(echo "$DEBIANTARGZ" | cut -d ' ' -f 4 | head -n 1)
			test -e "$DSCDIR/$DEBIANTARGZ" || die "$DSCDIR/$DEBIANTARGZ not found"
			setzip $DEBIANTARGZ
			tar --extract --to-stdout $ZIP --file "$DSCDIR/$DEBIANTARGZ" "$FILE" > "$WORKDIR/output" 2>/dev/null || :
			test -s "$WORKDIR/output" || exit 1
			# case 2a: file found in .debian.tar.gz
			cat "$WORKDIR/output"
			exit 0
			# for 3.0 format, no need to look in other places here
			;;
		*)
			ORIGTGZ=$(egrep '^ [0-9a-f]{32,64} [0-9]+ [^ ]+\.orig\.tar\.(gz|xz|lzma|bz2)$' "$DSC") || die "no orig.tar.gz found in $DSC"
			ORIGTGZ=$(echo "$ORIGTGZ" | cut -d ' ' -f 4 | head -n 1)
			test -e "$DSCDIR/$ORIGTGZ" || die "$DSCDIR/$ORIGTGZ not found"
			setzip $ORIGTGZ
			tar --extract --to-stdout $ZIP --file "$DSCDIR/$ORIGTGZ" --wildcards --no-wildcards-match-slash "*/$FILE" > "$WORKDIR/output" 2>/dev/null || :
			test -s "$WORKDIR/output" || exit 1
			# case 2b: file found in .orig.tar.gz
			# TODO: apply patches from debian.tar.gz
			cat "$WORKDIR/output"
			exit 0
			;;
	esac
fi
if TARGZ=$(egrep '^ [0-9a-f]{32,64} [0-9]+ [^ ]+\.tar\.(gz|xz|lzma|bz2)$' "$DSC") ; then
	TARGZ=$(echo "$TARGZ" | cut -d ' ' -f 4 | head -n 1)
	test -e "$DSCDIR/$TARGZ" || die "$DSCDIR/$TARGZ not found"
	setzip $TARGZ
	tar --extract --to-stdout $ZIP --file "$DSCDIR/$TARGZ" --wildcards --no-wildcards-match-slash "*/$FILE" > "$WORKDIR/output" 2>/dev/null || :
	test -s "$WORKDIR/output" || exit 1
	# case 3: file found in .tar.gz or .orig.tar.gz
	cat "$WORKDIR/output"
	exit 0
fi
exit 1
 |