Package: pax
Version: 1:20161104-2

The tar_rd() function does:

        pt = &(arcn->name[arcn->nlen - 1]);

without checking that arcn->nlen is greater than 0.


-- System Information:
Architecture: i386

Versions of packages pax depends on:
ii  libc6  2.24-17

--
Jakub Wilk

Reply via email to