#gnulib clear

tar/[REDACTED] env construction: strcpy on attacker-controlled value