Hi Paul,
I noticed the following commit:
commit ca02de4050357850a94f9208f81e00f15d105182 (HEAD -> master, origin/master,
origin/HEAD)
Author: Paul Eggert <egg...@cs.ucla.edu>
AuthorDate: Mon Aug 18 17:14:13 2025 -0700
Commit: Paul Eggert <egg...@cs.ucla.edu>
CommitDate: Mon Aug 18 17:14:49 2025 -0700
Avoid overrun when converting ns-resolution timestamps to text
Caught by gcc -fsanitize=address.
Inspired by Matthias Andree’s bug report in:
https://lists.gnu.org/r/bug-tar/2025-08/msg00019.html
though I found this bug via a simple "make check"
with sanitization enabled.
* src/common.h (TIMESPEC_STRSIZE_BOUND):
Make room for leading '-', needed in addition to the '-' room
supplied by SYSINT_BUFSIZE due to the way code_timespec works.
I reported this last year, but it seems to have been missed [1].
There is another patch in that message that adjusts library variables in
LDADD to their current names in Gnulib. The current ones will be empty.
Can you check that one? It still applies.
Collin
[1] https://lists.gnu.org/archive/html/bug-tar/2024-11/msg00003.html
