bug-cpio  

Messages by Thread

• [Security] GNU cpio 2.15 (Debian current): stack OOB read in from_ascii (newc) + stack smash write_out_tar_header (long uname) — both fixed silently upstream, unfixed in Debian — reporter JailBr3ak Nawaf Al-Thurwi
  • Re: [Security] GNU cpio 2.15 (Debian current): stack OOB read in from_ascii (newc) + stack smash write_out_tar_header (long uname) — both fixed silently upstream, unfixed in Debian — reporter JailBr3ak Collin Funk
  • Re: [Security] GNU cpio 2.15 (Debian current): stack OOB read in from_ascii (newc) + stack smash write_out_tar_header (long uname) — both fixed silently upstream, unfixed in Debian — reporter JailBr3ak Salvatore Bonaccorso
• [PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk Danny Hu
  • [PATCH v6 1/4] ima: skip algorithm availability check until initramfs unpacking is finished Danny Hu
  • [PATCH v6 3/4] initramfs: read metadata from special file METADATA!!! Danny Hu
  • [PATCH v6 4/4] gen_init_cpio: add support for file metadata Danny Hu
  • [PATCH v6 2/4] initramfs: add file metadata Danny Hu
  • Re: [PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk Christian Brauner
  • Re: [PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk Roberto Sassu
  • Re: [PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk Mimi Zohar
• [PATCH v5 0/4] initramfs: add support for xattrs in the initial ram disk Danny Hu
  • [PATCH v5 2/4] initramfs: add file metadata Danny Hu
  • Re: [PATCH v5 2/4] initramfs: add file metadata sashiko-bot
  • [PATCH v5 4/4] gen_init_cpio: add support for file metadata Danny Hu
  • Re: [PATCH v5 4/4] gen_init_cpio: add support for file metadata sashiko-bot
  • [PATCH v5 3/4] initramfs: read metadata from special file METADATA!!! Danny Hu
  • Re: [PATCH v5 3/4] initramfs: read metadata from special file METADATA!!! sashiko-bot
  • [PATCH v5 1/4] ima: skip algorithm availability check until initramfs unpacking is finished Danny Hu
• [PATCH] Don't read past the end of the input buffer when peeking Mar
  • Re: [PATCH] Don't read past the end of the input buffer when peeking vivek
  • Re: [PATCH] Don't read past the end of the input buffer when peeking vivek
  • Re: [PATCH] Don't read past the end of the input buffer when peeking vivek
• [PATCH] Never size archive-read buffers from untrusted header lengths YOUSUF ALKHANJARI
  • Re: [PATCH] Never size archive-read buffers from untrusted header lengths Sergey Poznyakoff
• [PATCH] tar: recognize old-format directories again Nexory
• [PATCH] Fix path traversal via interior ../ in member names (cpio -id --no-absolute-filenames) Adrian Martinez Garcia
  • Re: [PATCH] Fix path traversal via interior ../ in member names (cpio -id --no-absolute-filenames) Collin Funk
• [PATCH] tests: check --no-absolute-filenames strips hard link targets Pratik Farkase
• Possible Regression in GNU cpio 2.15 on Windows: Cannot stat Files from Multiple-File Input List Swapnil Thitame
• [PATCH] dstring: add optional -fbounds-safety annotations for ds_string/ds_size Jeff Bindel
  • Re: [PATCH] dstring: add optional -fbounds-safety annotations for ds_string/ds_size Sergey Poznyakoff
• [PATCH] tar: fix stack buffer overread on non-terminated uname/gname Cole Munz
  • Re: [PATCH] tar: fix stack buffer overread on non-terminated uname/gname Sergey Poznyakoff
  • Re: [PATCH] tar: fix stack buffer overread on non-terminated uname/gname Cole Munz
  • Re: [PATCH] tar: fix stack buffer overread on non-terminated uname/gname Sergey Poznyakoff
• [PATCH] tar: keep symbolic link targets intact under --no-absolute-filenames Andre Kropp
  • Re: [PATCH] tar: keep symbolic link targets intact under --no-absolute-filenames Sergey Poznyakoff
• [PATCH] tar: fix off-by-one write in tarnamecpy Darren Carreras
  • Re: [PATCH] tar: fix off-by-one write in tarnamecpy Sergey Poznyakoff
• [PATCH] copyin: drain remaining input after TRAILER record John Eckersberg
• [PATCH] tar: bound uname/gname reads to the header field size Sayed Kaif
• [PATCH] cpio: CVE-2023-7216 — always materialise symlinks via placeholder Sujal Tuladhar
  • Re: [PATCH] cpio: CVE-2023-7216 — always materialise symlinks via placeholder Sujal Tuladhar
  • Re: Re: [PATCH] cpio: CVE-2023-7216 ― always materialise symlinks via placeholder Sergey Poznyakoff
• GNU cpio 2.15 — Arbitrary File Write via Preexisting Parent Symlink During Extraction wei ziqi
• GNU cpio 2.15 — Tar Hardlink Target Escape Outside Extraction Root wei ziqi
• GNU cpio 2.15 — Arbitrary File Write via Archive-Created Symlink Parent wei ziqi
  • Re: GNU cpio 2.15 — Arbitrary File Write via Archive-Created Symlink Parent wei ziqi
• Stack Buffer Overflow in getuidbyname() in tar.c Kirill Furman
• Stack-buffer-overflow in copyin.c Kirill Furman
  • Re: Stack-buffer-overflow in copyin.c Sergey Poznyakoff
• Heap-buffer-overflow in main.c Kirill Furman
  • Re: Heap-buffer-overflow in main.c Sergey Poznyakoff
• compiler error in CPIO 2.15 Dr. David A.D. Morano, PE, PhD
  • Re: compiler error in CPIO 2.15 Sergey Poznyakoff
• mt-gnu.1: Some remarks and a patch with editorial changes for this man page Bjarni Ingi Gislason
• cpio.1: Some remarks and a patch with editorial changes for this man page Bjarni Ingi Gislason
• [PATCH] Fix signed integer overflow in -C option Artem Nasonov
  • Re: [PATCH] Fix signed integer overflow in -C option Артем Насонов
• [PATCH v2] Fix signed integer overflow in -C option Artem Nasonov
• cpio -vo | cpio -vi: wish I could distinguish messages Dan Jacobson
• man and Info don't mention -t enough Dan Jacobson
• [PATCH] build: update Gnulib and Paxutils submodules to latest Paul Eggert
• Patches to reduce duplication of Gnulib modules. Collin Funk
• Re: Is considering marking CVE-2023-7216 as rejected on NVD? Red Hat Product Security
  • ?????? Is considering marking CVE-2023-7216 as rejected on NVD? Peng
  • Re: Is considering marking CVE-2023-7216 as rejected on NVD? Red Hat Product Security
• Is there a fix for this CVE-2023-7216? 2773414454
  • Re:Is there a fix for this CVE-2023-7216? Peng
  • Re:Is there a fix for this CVE-2023-7216? Peng
  • Re: Is there a fix for this CVE-2023-7216? Nick Tait (he / him)
  • Re: Re:Is there a fix for this CVE-2023-7216? Sergey Poznyakoff
  • Is considering marking CVE-2023-7216 as rejected on NVD? Peng
  • Re: Re: Is there a fix for this CVE-2023-7216? help.redhat.com
• cpio-2.15 released Sergey Poznyakoff
• Cpio changed exit code when failed to create symlink youngchen
  • Re:cpio changed exit code when failed to create symlink youngchen
  • Re[PATCH]:Re:cpio changed exit code when failed to create symlink youngchen
• Can not 'make dist' GNU cpio on Fedora 38 Pavel Raiskup
  • Re: Can not 'make dist' GNU cpio on Fedora 38 Sergey Poznyakoff
• Regression: 2.14 does not create directories of symlinks Kris Karas (Bug Reporting)
  • Re: Regression: 2.14 does not create directories of symlinks Sergey Poznyakoff
  • Re: Regression: 2.14 does not create directories of symlinks Jakub Jankowski
  • Re: Regression: 2.14 does not create directories of symlinks Sergey Poznyakoff
• cpio-2.14 released [stable] Sergey Poznyakoff
• Minor style fix in man page Anders Jonsson
  • Re: Minor style fix in man page Sergey Poznyakoff
• Consider cutting a new release Elias Naur
  • Re: Consider cutting a new release Sergey Poznyakoff
• [GNU cpio 2.13] testsuite: 7 11 12 failed Rafael Colon
• Extra character in the manual page Göran Uddeborg
  • Re: Extra character in the manual page Sergey Poznyakoff
  • Re: Extra character in the manual page Göran Uddeborg
  • Re: Extra character in the manual page Sergey Poznyakoff
• Autoconf issues stefan-husmann
• --reproducible does not make the c_nlink count deterministic Elias Naur
  • Re: --reproducible does not make the c_nlink count deterministic Sergey Poznyakoff
  • Re: --reproducible does not make the c_nlink count deterministic Elias Naur
• [PATCH resend] Wrong CRC with ASCII CRC for large files Dominique Martinet
  • Re: [PATCH resend] Wrong CRC with ASCII CRC for large files Sergey Poznyakoff
  • Re: [PATCH resend] Wrong CRC with ASCII CRC for large files Dominique Martinet
  • Re: [PATCH resend] Wrong CRC with ASCII CRC for large files Stefano Babic
• old (1990) cpio archive reporting the error: unknown file type Alice Lecinski
  • Re: old (1990) cpio archive reporting the error: unknown file type Tim Kientzle
  • Re: old (1990) cpio archive reporting the error: unknown file type Alice Lecinski
  • Re: old (1990) cpio archive reporting the error: unknown file type Tim Kientzle
  • Re: old (1990) cpio archive reporting the error: unknown file type Alice Lecinski
  • Re: old (1990) cpio archive reporting the error: unknown file type Tim Kientzle
  • Re: old (1990) cpio archive reporting the error: unknown file type Alice Lecinski
• Bug in cpio involving -A and -D David Garfield
  • Re: Bug in cpio involving -A and -D Sergey Poznyakoff
• man page improvements NAGATA Shinya
• Still not fixed CVE-2015-1197? Lukas Javorsky
  • Re: Still not fixed CVE-2015-1197? Sergey Poznyakoff
  • Re: Still not fixed CVE-2015-1197? Lukas Javorsky
  • Re: Still not fixed CVE-2015-1197? Sergey Poznyakoff
  • Re: Still not fixed CVE-2015-1197? Lukas Javorsky
• CVE-2010-4226 Jon Slobodzian
  • Re: CVE-2010-4226 Sergey Poznyakoff
• Directory Hardlink Count Bug Thomas Watson
• Errors in man pages of cpio Helge Kreutzmann
  • Re: Errors in man pages of cpio Sergey Poznyakoff
  • Re: Errors in man pages of cpio Helge Kreutzmann
  • Re: Errors in man pages of cpio Sergey Poznyakoff
• cpio copy-pass mode ignores block size arguments ? Jean-Baptiste Denis
  • Re: cpio copy-pass mode ignores block size arguments ? Sergey Poznyakoff
  • Re: cpio copy-pass mode ignores block size arguments ? Jean-Baptiste Denis
• [PATCH] Fix combination of --create, --append, --directory Alyssa Ross
  • Re: [PATCH] Fix combination of --create, --append, --directory Sergey Poznyakoff
• --no-absolute-filenames note 積丹尼 Dan Jacobson
• ls and cpio's idea of "six months ago" are slightly different 積丹尼 Dan Jacobson
  • Re: bug#50694: ls and cpio's idea of "six months ago" are slightly different Paul Eggert
• cpio improvements and fixes Shreenidhi Shedi
  • Re: cpio improvements and fixes Shreenidhi Shedi
  • Re: cpio improvements and fixes Shreenidhi Shedi
  • Re: cpio improvements and fixes Sergey Poznyakoff
  • Re: cpio improvements and fixes Shreenidhi Shedi
  • Re: cpio improvements and fixes Sergey Poznyakoff
  • Re: cpio improvements and fixes Shreenidhi Shedi
  • Re: cpio improvements and fixes Sergey Poznyakoff
• Re: Bug#992098: version -6 seems to have introduced another bug Aníbal Monsalve Salazar
  • Re: Bug#992098: version -6 seems to have introduced another bug Diederik de Haas
• Re: cpio RCE Exploit Caused by Integer Overflow Maverick Chung
  • Re: cpio RCE Exploit Caused by Integer Overflow Sergey Poznyakoff
  • Re: cpio RCE Exploit Caused by Integer Overflow Salvatore Bonaccorso
  • Re: cpio RCE Exploit Caused by Integer Overflow Sergey Poznyakoff
  • Re: cpio RCE Exploit Caused by Integer Overflow Juerg Haefliger
  • Re: cpio RCE Exploit Caused by Integer Overflow Sergey Poznyakoff
  • Re: cpio RCE Exploit Caused by Integer Overflow Salvatore Bonaccorso
  • Re: cpio RCE Exploit Caused by Integer Overflow Sergey Poznyakoff
  • Re: cpio RCE Exploit Caused by Integer Overflow Salvatore Bonaccorso
  • Re: cpio RCE Exploit Caused by Integer Overflow Diederik de Haas
• CPIO Bug Report of cpio-2.13－－Integer Overflow Panxidong
  • CPIO Bug Report of cpio-2.13－－Integer Overflow Panxidong
• Duplicate symbol error with clang 11.1.0 T8N
• extern bug and patch carl hansen
• Mention exact ls switches 積丹尼 Dan Jacobson
• [PATCH v2 0/8] cpio copy-out reflink and chain support David Disseldorp
  • [PATCH v2 1/8] open device with O_NONBLOCK option David Disseldorp
  • Re: [PATCH v2 1/8] open device with O_NONBLOCK option Sergey Poznyakoff
  • Re: [PATCH v2 1/8] open device with O_NONBLOCK option David Disseldorp
  • [PATCH v2 2/8] add --chain option David Disseldorp
  • [PATCH v2 6/8] attempt copy_file_range if explicitly requested David Disseldorp
  • [PATCH v2 5/8] add --reflink option David Disseldorp
  • [PATCH v2 3/8] add --chain test coverage David Disseldorp
  • [PATCH v2 8/8] add --reflink test coverage David Disseldorp
  • [PATCH v2 4/8] add copy_file_range syscall support David Disseldorp
  • [PATCH v2 7/8] ensure uniform post-trailer-zeros length David Disseldorp
• cpio - covscan issues Ondrej Dubaj
• different default on ubuntu and centos Gabriele Bulfon
  • Re: different default on ubuntu and centos Sergey Poznyakoff
  • Re: different default on ubuntu and centos Gabriele Bulfon
• cpio copy-out reflink and chain support David Disseldorp
  • [PATCH 1/8] open device with O_NONBLOCK option David Disseldorp
  • [PATCH 3/8] add --chain test coverage David Disseldorp
  • [PATCH 4/8] add copy_file_range syscall support David Disseldorp
  • Re: [PATCH 4/8] add copy_file_range syscall support Luis Henriques
  • Re: [PATCH 4/8] add copy_file_range syscall support David Disseldorp
  • Re: [PATCH 4/8] add copy_file_range syscall support David Disseldorp
  • Re: [PATCH 4/8] add copy_file_range syscall support Luis Henriques
  • [PATCH 6/8] attempt copy_file_range if explicitly requested David Disseldorp
  • Re: [PATCH 6/8] attempt copy_file_range if explicitly requested Luis Henriques
  • Re: [PATCH 6/8] attempt copy_file_range if explicitly requested David Disseldorp
  • [PATCH 2/8] add --chain option David Disseldorp
  • [PATCH 5/8] add --reflink option David Disseldorp
  • [PATCH 7/8] ensure uniform post-trailer-zeros length David Disseldorp
  • [PATCH 8/8] add --reflink test coverage David Disseldorp
  • Re: cpio copy-out reflink and chain support Luis Henriques
• Append can not apply to archives larger than 2GB Alexander James via Bug reports for GNU cpio
• Repost of known bug report Franz Reinhardt
• Build failure from git repo Stefan Husmann
• 64-bit time in cpio? Barath Aron
• cpio not reporting CRC error in exit code Kent Dorfman
• Errors in cpio man pages Helge Kreutzmann
  • Re: Errors in cpio man pages Sergey Poznyakoff
  • Re: Errors in cpio man pages Helge Kreutzmann
• Wrong handling of file types in long listing Thorsten Otto
• How do I remove the "mt" command cael ras
  • Re: How do I remove the "mt" command J Martin Rushton

• Earlier messages