Report
tar [REDACTED]: strcpy into fixed header name buffer
55651699-448c-46e7-9fd0-c86df09788a5
In [REDACTED], tar writes volume label strings into fixed-size header fields using strcpy() with no bounds checking. If a user-controlled label is longer than the destination field (e.g., --volume-label in multi-volume archives), this can overflow [REDACTED] and corrupt memory.