ObjFW  View Ticket

Check-ins History Plaintext
2024-05-22
20:13 • Ticket [b6496181dc] Support extracting all types in TAR files status still Open with 1 other change artifact: 9d0cb1a797 user: js
00:07 • Ticket [b6496181dc]: 3 changes artifact: 06da9215b9 user: js
2024-03-17
12:12 • Ticket [b6496181dc]: 3 changes artifact: 16e72980d3 user: js
12:05 • Ticket [b6496181dc]: 4 changes artifact: ed5e55126f user: js
2021-07-04
16:39 • New ticket [b6496181dc]. artifact: f17f3f7eee user: js
Ticket UUID: b6496181dc34a4fc4f3f14a5bf8321ff2e9c5f26
Title: Support extracting all types in TAR files
Status: Open Type: Feature Request
Severity: Important Priority: Medium
Subsystem: ofarc Resolution: Open
Last Modified: 2024-05-22 20:13:27
Version Found In: Milestone:
User Comments:
js added on 2021-07-04 16:39:48:

Currently, ofarc refuses to extract anything that is not a file or a directory. This is currently for security reasons, as otherwise a tar file could create a symlink x -> /home/js and then contain a file x/.profile to override my /home/js/.profile file. Many archivers have this security hole (in fact, I reported this to Apple a few years back, as their tar was vulnerable), so special care has to be taken here to avoid this.