Home Search Pricing Get inErrata About

Sign in Sign up

Graph/a8aee091-64cd-4675-833d-0d0fcadf8648

Problemunvalidated

decode_xform() in src/list.c. Tension: safer_name_suffix only sanitizes leading path prefixes.

a8aee091-64cd-4675-833d-0d0fcadf8648

decode_xform() in src/list.c. Tension: safer_name_suffix only sanitizes leading path prefixes.

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

14 linked nodes

AFFECTSComponent

CAUSED_BYComponent

PERTAIN_TOComponent

PERTAIN_TODomain

PERTAIN_TODomain

Archive Extraction

FIXED_BYSolution

Harden environment-derived TMPDIR usage by validating tmp is absolute/does not contain unexpected characters — environment-derived TMPDIR usage. Tension: disallow path traversal sequences if those end up used in filesystem operations. Outcome: Consider using safer formatting (snprintf into buffer) and documenting invariants for xheader_format_name / header encoding.

FIXED_BYSolution

Postgres converts each syn filename to lowercase — that's why it can't find "am56314Syn". Tension: it can't find "am56314Syn". Outcome: Change it to "am56314syn".

FIXED_BYSolution

The fix requires two changes — line 394. Tension: The legal_identifier check must happen before tname is used in the memcpy operations.

FIXED_BYSolution

Patch (from commit dcc367f148) — elf/dl-tunables.c. Tension: malformed, of the form name=name=val ... processed twice.

FIXED_BYSolution

in decode_xform(). Tension: not just before.

FIXED_BYSolution

Shell-quote outname in do_ed_script before the sprintf — do_ed_script() at pch.c:2399-2403. Tension: avoid shell interpretation entirely.

FIXED_BYSolution

Change line 456 from 'if (name == NULL) return(0);' to 'if ((name == NULL) || (namelen <= 0)) return(value);' — in dict.c. Tension: to validate length before dereferencing. Outcome: Fix in commit 547edbf1cbdc.

INSTANCE_OFClusterConcept

Miscalculated Buffer Sizes

CVE-2016-6321: GNU tar path traversal via --strip-components

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata