Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Mar 2019 05:56:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 236870] libarchive directory traversal gives spurious permission errors
Message-ID:  <bug-236870-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236870

            Bug ID: 236870
           Summary: libarchive directory traversal gives spurious
                    permission errors
           Product: Base System
           Version: 12.0-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: andrew@tao11.riddles.org.uk

Created attachment 203232
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=203232&action=edit
libarchive directory traversal patch

libarchive-based utilities, notably including tar(1), fail if told to traverse
"." if the parent directory is not readable. This is caused by libarchive
trying to open ".." at the end of the traverse in order to exit the directory,
which is an obviously wrong thing to do.

Attached patch (against 12-stable) fixes this and includes a test case.

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-236870-227>