bug-gnu-utils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security bug: tar allows to overwrite arbitrary file when extracting


From: Eli Zaretskii
Subject: Re: Security bug: tar allows to overwrite arbitrary file when extracting
Date: Sat, 30 Jun 2001 20:33:35 +0300

> Date: Sat, 30 Jun 2001 07:11:02 -0700 (PDT)
> From: Paul Eggert <address@hidden>
> 
> > I'd suggest instead to define a macro IS_ABSOLUTE which will return
> > non-zero if its argument is an absolute file names, and then define it
> > as appropriate for each filesystem.  That's what other GNU packages
> > do.
> 
> This sounds like a good idea.  Can you please point me to a GNU
> package that does this?  I looked in fileutils and it doesn't have
> IS_ABSOLUTE.

Two places where you can find this idea in action is Texinfo (see the
file lib/system.h) and Binutils/GDB (see include/filenames.h).

(Fileutils still don't support DJGPP or any other non-Posix system in
the official distribution, that's why you don't see this there.)



reply via email to

[Prev in Thread] Current Thread [Next in Thread]