Public bug reported:
Hi! I can reproduce this on Ubuntu 24.04 and 24.10 but not Debian
stable/testing. Tar version 1.35.
jas@kaka:~$ podman run -it --rm ubuntu:24.04
root@3672b1c0c909:/# export
TAR_OPTIONS="--pax-option='delete=atime,delete=ctime'"
root@3672b1c0c909:/# mkdir foo
root@3672b1c0c909:/# tar cf foo.tar foo
*** buffer overflow detected ***: terminated
Aborted (core dumped)
root@3672b1c0c909:/#
It seems somehow related to using quotes in the command line since this
works:
root@3672b1c0c909:/# export TAR_OPTIONS="--pax-
option=delete=atime,delete=ctime"
Arguable this may be incorrect usage, but tar shouldn't crash. Strange
thing is that Debian tar doesn't crash.
Thanks,
Simon
** Affects: tar (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to tar in Ubuntu.
https://bugs.launchpad.net/bugs/2093028
Title:
tar in 24.04+24.10 crash on pax archives with options
Status in tar package in Ubuntu:
New
Bug description:
Hi! I can reproduce this on Ubuntu 24.04 and 24.10 but not Debian
stable/testing. Tar version 1.35.
jas@kaka:~$ podman run -it --rm ubuntu:24.04
root@3672b1c0c909:/# export
TAR_OPTIONS="--pax-option='delete=atime,delete=ctime'"
root@3672b1c0c909:/# mkdir foo
root@3672b1c0c909:/# tar cf foo.tar foo
*** buffer overflow detected ***: terminated
Aborted (core dumped)
root@3672b1c0c909:/#
It seems somehow related to using quotes in the command line since
this works:
root@3672b1c0c909:/# export TAR_OPTIONS="--pax-
option=delete=atime,delete=ctime"
Arguable this may be incorrect usage, but tar shouldn't crash.
Strange thing is that Debian tar doesn't crash.
Thanks,
Simon
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tar/+bug/2093028/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
