[Python-Dev] Request for developer privileges.

2006-12-20 Thread Lars Gustäbel
Hello, my name is Lars Gustäbel (SF gustaebel). I contributed tarfile.py to the Python standard library in January 2003 and have been the maintainer since then. I have provided about 25 patches over the years, most of them fixes, some of them new features and improvements. As a result, I am

Re: [Python-Dev] 2.5 branch unfrozen

2007-04-21 Thread Lars Gustäbel
On Sat, Apr 21, 2007 at 04:45:37PM +1000, Anthony Baxter wrote: > Ok, things seem to be OK. So the release25-maint branch is unfrozen. > Go crazy. Well, a little bit crazy. I'm afraid that I went crazy a little too early. Sorry for that. Won't happen again. -- Lars Gustäbel

Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-25 Thread Lars Gustäbel
path) > else: > warnings.warn("non-local file skipped: %s" % tarinfo.name, > RuntimeWarning, stacklevel=1) > > For extract(), i am not sure. Maybe it should throw exception when it > encounters such file, and have a special option to extract such files >

Re: [Python-Dev] tarfile and directory traversal vulnerability

2007-08-27 Thread Lars Gustäbel
On Mon, Aug 27, 2007 at 07:40:36PM +0200, Jan Matejek wrote: > Lars Gustäbel wrote: > > Suppose we have: > > foo -> /etc > > foo/passwd > > > > If creation of the foo symlink is delayed, foo/passwd will be > > extracted in a directory foo which will be cr