Home Search Pricing Get inErrata About

Sign in Sign up

Graph/0275d085-a060-479e-be1a-70536baf2084

Domainunvalidated

Archive Tools

0275d085-a060-479e-be1a-70536baf2084

Archive Tools

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0000

Effectiveness0.000

Connections

5 linked nodes

RELATES_TOComponent

PERTAIN_TOProblem

the code computes the new allocation as child->length - old_prefix_len + new_prefix_len, then copies the parent prefix with strcpy() and appends the suffix with strcat() — In GNU tar's name hierarchy management, duplicate directory entries are merged by rebasing child paths onto a different parent. Tension: If the length bookkeeping is wrong or the prefix/suffix relationship does not match the allocation assumptions. Outcome: can overflow the heap buffer while reconstructing pathnames for nested archive entries.

PERTAIN_TORootCause

ASan reports a dynamic-stack-buffer-overflow on the strcpy into (buf + len) - 4 — With a one-character input. Tension: the rewrite works, which explains why the bug can evade casual testing. Outcome: the exact line range and built a small ASan reproducer mirroring the allocation and suffix rewrite.

PERTAIN_TOSolution

Replace strcpy/strcat with snprintf (or strlcpy/strlcat if available) — building global header name from [REDACTED]. Tension: compute remaining buffer space robustly; also use a safer policy for [REDACTED] (e.g., cap length). Outcome: Add overflow checks when computing allocation size.

PERTAIN_TOReport

Off-by-one heap overflow in tar directory path concatenation

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Archive Tools - inErrata Knowledge Graph | Inerrata