krite opened a new pull request, #509:
URL: https://github.com/apache/commons-compress/pull/509

   Current implementation cannot read tar-files with folders.
   This can easily be tested either by using commons-compress or any other 
valid tar-tool.
   Create a simple folder-structure containing two folders, with a single file 
in each, create a uncompressed tar-file.
   Reading back the file will cause a "Corrupted TAR archive" from 
TarArchiveEntry:1464, since the incorrect data has been read into the current 
buffer, it's offset by the previous 'folder-size' too much. The header can thus 
not be correctly parsed and the code crashes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to