control: tag -1 + confirmed upstream
control: forward -1 https://github.com/libarchive/libarchive/issues/740

Hi,

Thanks for taking a look at libarchive and bsdtar for your tests!

Well, I do understand your case, and I forwarded it to the upstream
GitHub issue tracker.  However, the fact remains that this behavior:

- has been with libarchive since pretty much the very beginning, or
  at least the moment when it was broken out of FreeBSD as a standalone
  project, and

- there are arguments in favor of the current behavior: in the common
  case multiple slashes are, at best, useless, and, at worst, harmful
  on, say, Windows with its //hostname/path network share syntax

So let's see what the upstream authors say; in the worst case we may
decide to carry this as a Debian-specific patch for the benefit of
compatibility with GNU tar, but, to be honest, I see a couple of
potential drawbacks with this approach, too; some might even mumble
something about "gratuitous differences in behavior" and "POLA
violations" when writing portable scripts using bsdtar :)

Still, thanks for reporting this and for doing the path traversal
tests at all!

G'luck,
Peter

-- 
Peter Pentchev  r...@ringlet.net r...@freebsd.org p...@storpool.com
PGP key:        http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13

Attachment: signature.asc
Description: PGP signature

Reply via email to