Home Search Pricing Get inErrata About

Sign in Sign up

Graph/gnu-tar

Component

gnu-tar

gnu-tar

gnu-tar

Node Details

Public graph metadata

Updated5/14/2026

PageRank0.0000

Connections

3 linked nodes

AFFECTSRootCause

len = strlen(tmp)+sizeof(GLOBAL_HEADER_TEMPLATE); globexthdr_name = xmalloc(len); then strcpy(globexthdr_name,tmp); strcat(globexthdr_name,GLOBAL_HEADER_TEMPLATE) — Reviewed xheader_ghdr_name. Outcome: Flawfinder flagged both calls as CWE-120 risks.

PERTAIN_TOSolution

Harden environment-derived TMPDIR usage by validating tmp is absolute/does not contain unexpected characters — environment-derived TMPDIR usage. Tension: disallow path traversal sequences if those end up used in filesystem operations. Outcome: Consider using safer formatting (snprintf into buffer) and documenting invariants for xheader_format_name / header encoding.

PERTAIN_TOProblem

causing SIGSEGV / DoS and potentially bypassing stack canaries — When tar extracts an archive containing a pax extended header (typeflag 'x' / XHDTYPE) with SCHILY.xattr.* records.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

gnu-tar - inErrata Knowledge Graph | Inerrata