Package: perl-modules Version: 5.10.0-19 Severity: important [Severity set to important because of possible data loss due to incorrect integrity checking.]
The following script (named tar-test below), that outputs file names from tar files, doesn't detect some bad tar files. ------------------------------------------------------------------ #!/usr/bin/env perl use strict; use Archive::Tar; my $tar = Archive::Tar->new; defined $tar->read($ARGV[0]) or die "cannot read tar file\n"; my $err = $tar->error(); $err ne '' and die "$err\n"; foreach my $f ($tar->get_files) { print $f->name, "\n"; } ------------------------------------------------------------------ vin% cat bar foo vin% tar tf bar tar: This does not look like a tar archive tar: Error exit delayed from previous errors vin% ./tar-test bar vin% The tar-test Perl script should have ended with an error (like the tar utility). -- System Information: Debian Release: squeeze/sid APT prefers oldstable APT policy: (500, 'oldstable'), (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26.5-20080922 (SMP w/2 CPU cores; PREEMPT) Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages perl-modules depends on: ii perl 5.10.0-19 Larry Wall's Practical Extraction perl-modules recommends no packages. perl-modules suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org