Package: xarchiver
Version: 1:0.5.4.14-1
Severity: critical
Justification: causes serious data loss

Dear Maintainer,

Subject: xarchiver Deleting Files Outside of Archive

The deleted files are linked to (ln -s) from within the archive (tar.gz), but reside outside of the archive.

These external files get deleted if one double clicks on the link line within xarchiver and the file resides on an ntfs disk.

#--------

#  The behaviour can be repeated as follows

cd /home/david/
mkdir Example

#  Write a txt file to within Example
echo "file red" > Example/red.txt

#  Utilise much spare disk space on ntfs drive
#  it needs to be ntfs
cd /mnt/win7/david/
mkdir MoreColours
echo "file green" > MoreColours/green.txt
echo "file blue" > MoreColours/blue.txt

#  Make symbolic link to MoreColours
#    from within dir Example
cd /home/david/Example
ln -s -T /mnt/win7/david/MoreColours MoreColours

#  Make a tape archive of Example
cd /home/david/
tar -czvf example.tar.gz Example

#  Open using xarchiver, and
#  note that MoreColours points to correct location
xarchiver example.tar.gz

thunar /mnt/win7/david/MoreColours

#  Now double click on this line in xarchiver AND
#  watch the files in MoreColours in thunar above
#  at the same time. They get REMOVED.

#  I would have expected a default action of double
#  clicking to be something like opening thunar above.

#  An error message pops up:
'Failed to open "/tmp/xa-43Y950/MoreColours".
Error when getting information for the file "/tmp/xa-43Y950/MoreColours": No such file or directory.'

#  Goto the /tmp dir named in the Error Pop-up
cd /tmp/xa-43Y950/
ls -l

-rwxrwxrwx 1 david david    10 Jul 10 13:14 blue.txt
-rwxrwxrwx 1 david david    11 Jul 10 13:14 green.txt
drwx------ 3 david david  4096 Jul 10 13:32 xa-tmp.0XTI60
-rw-r--r-- 1 david david 10240 Jul 10 13:30 xa-tmp.decompressed

#--------

The files blue.txt and green.txt have been MOVED to /tmp/xa-43Y950/. xarchiver should not have the permission to move/delete files that are not within the archive specified by the user.

When one closes xarchiver the /tmp dir is deleted along with all of ones files, 2.7Gb in my case. I lost them before seeing what was happening.

There is a conflict with ntfs, the above does not happen if the linked directory is on the local ext4 disk.

Is this related to the following bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862593

Possibly some escaped characters with ntfs mounts are not being dealt with properly?

The ntfs disk mount is configured in /etc/fstab:
UUID=id.here /mnt/win7  ntfs  user,auto,uid=a.number,gid=a.number  0  0

Regards
David Harte



-- System Information:
Debian Release: 10.10
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-17-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ.utf8, LC_CTYPE=en_NZ.utf8 (charmap=UTF-8), LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages xarchiver depends on:
ii  libc6               2.28-10
ii  libgdk-pixbuf2.0-0  2.38.1+dfsg-1
ii  libglib2.0-0        2.58.3-2+deb10u3
ii  libgtk-3-0          3.24.5-1

Versions of packages xarchiver recommends:
ii  bzip2       1.0.6-9.2~deb10u1
ii  p7zip-full  16.02+dfsg-6
ii  unzip       6.0-23+deb10u2
ii  xdg-utils   1.1.3-1+deb10u1
ii  xz-utils    5.2.4-1

Versions of packages xarchiver suggests:
pn  arj          <none>
ii  binutils     2.31.1-16
ii  cpio         2.12+dfsg-9
pn  lhasa        <none>
pn  liblz4-tool  <none>
pn  lrzip        <none>
pn  lzip         <none>
pn  lzop         <none>
pn  ncompress    <none>
pn  rar          <none>
pn  unar         <none>
ii  zip          3.0-11+b1
pn  zstd         <none>

-- no debconf information

Reply via email to