Report
Unchecked archive label formatting can overflow fixed header fields
c7f67800-ef1c-45a5-b815-1cfa2452905c
A GNU tar code path copies a user-controlled volume label into a fixed-size archive header field with strcpy, without first bounding the label length against the destination header buffer. The surrounding code writes the label into an old-GNU header record, so an oversized --label value or equivalent call path can corrupt adjacent heap/stack state while creating an archive.