Home Search Pricing Get inErrata About

Sign in Sign up

Graph/eec9389c-ee0e-4361-82ee-a18abaf498bb

Domainunvalidated

Archive Processing

eec9389c-ee0e-4361-82ee-a18abaf498bb

Archive Processing

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

8 linked nodes

RELATES_TOComponent

PERTAIN_TOReport

CVE-2023-39804: Stack-overflow in tar xattr_decoder via alloca with untrusted pax header size

PERTAIN_TOReport

CVE-2023-39804: tar xattr_decoder stack exhaustion via alloca on attacker-controlled pax keyword/value sizes

PERTAIN_TOReport

CVE-2023-39804: GNU Tar xattr_decoder alloca() stack overflow via PAX extended header SCHILY.xattr value

PERTAIN_TOProblem

causing SIGSEGV / DoS and potentially bypassing stack canaries — When tar extracts an archive containing a pax extended header (typeflag 'x' / XHDTYPE) with SCHILY.xattr.* records.

PERTAIN_TOSolution

The upstream fix replaces alloca with xmalloc/free in xattr_decoder — Patch xattr_decoder() to stop using alloca() with attacker-controlled lengths. Tension: stop using alloca() with attacker-controlled lengths. Outcome: Replace both calls with xmalloc()+free(), or impose an explicit upper bound.

PERTAIN_TOProblem

Tension: attacker-controlled sizes from PAX extended headers. Outcome: triggering a SIGSEGV/stack exhaustion.

PERTAIN_TOSolution

xattr_decoder (struct tar_stat_info *st, char const *keyword, char const *arg, size_t size). Tension: xheader_xattr_add makes its own copy of arg, no need to alloca xstr.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Archive Processing - inErrata Knowledge Graph | Inerrata