Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Mar 2019 05:56:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 236870] libarchive directory traversal gives spurious permission errors
Message-ID:  <bug-236870-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D236870

            Bug ID: 236870
           Summary: libarchive directory traversal gives spurious
                    permission errors
           Product: Base System
           Version: 12.0-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: andrew@tao11.riddles.org.uk

Created attachment 203232
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D203232&action=
=3Dedit
libarchive directory traversal patch

libarchive-based utilities, notably including tar(1), fail if told to trave=
rse
"." if the parent directory is not readable. This is caused by libarchive
trying to open ".." at the end of the traverse in order to exit the directo=
ry,
which is an obviously wrong thing to do.

Attached patch (against 12-stable) fixes this and includes a test case.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-236870-227>