Subject: Re: tar ignores filenames that contain `..'
To: Frederick Bruckman <fredb@immanent.net>
From: Greg A. Woods <woods@weird.com>
List: tech-pkg
Date: 10/23/2002 12:05:39
[ On Wednesday, October 23, 2002 at 09:25:03 (-0500), Frederick Bruckman wrote: ]
> Subject: Re: tar ignores filenames that contain `..'
>
> On Wed, 23 Oct 2002, Shin'ichiro TAYA wrote:
> 
> > After switching to pax based tar, tar ignores filenames that contain `..'.
> > But some distfile for pkgsrc contains symlinks that points to file
> > contain '..' then failes to extract.
> > e.g.
> >
> > => Checksum OK for STLport-4.0.tar.gz.
> > ===> Extracting for stlport-4.0nb2
> > ===> Required installed package gmake>=3.78: gmake-3.79.1nb1 found
> > ===> Required installed package libtool-base>=1.4.20010614nb9: libtool-base-1.4.20010614nb9 found
> > tar: Ignoring link containing `..' (../algorithm)
> > tar: Ignoring link containing `..' (../bitset)
> > tar: Ignoring link containing `..' (../cassert)
> >
> > How should we fix this?
> > fix pkgsrc and related things? or /bin/tar ?
> 
> This "pax" bug^H^H^Hfeature also breaks binary packages (PR bin/18759).
> It needs to be fixed in "pax".

That's certainly not the clear answer according to the followup
discussion in the PR.

I would say from my experience in using pax exclusively for well over a
year now, and from what I read in that followup discussion, that the bug
really must be fixed in pkg_create.

-- 
								Greg A. Woods

+1 416 218-0098;            <g.a.woods@ieee.org>;           <woods@robohack.ca>
Planix, Inc. <woods@planix.com>; VE3TCP; Secrets of the Weird <woods@weird.com>