From: Gary V. Vaughan <gary@gnu.org>
Date: Wed, 2 Mar 2005 15:58:14 +0000 (+0000)
Subject: * libtoolize.m4sh (func_copy_cb): Use tar chof to avoid symlink
X-Git-Tag: release-1-5-16~35
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=77b6d7b62e0ac4c223d1513522bc47357d8c20f7;p=thirdparty%2Flibtool.git

* libtoolize.m4sh (func_copy_cb): Use tar chof to avoid symlink
attacks.
* libltdl/Makefile.am (install-data-local): Ditto.
---

diff --git a/ChangeLog b/ChangeLog
index 108268f3c..f1c8fda73 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,7 +1,13 @@
+2005-03-02  Gary V. Vaughan  <gary@gnu.org>
+
+	* libtoolize.m4sh (func_copy_cb): Use tar chof to avoid symlink
+	attacks.
+	* libltdl/Makefile.am (install-data-local): Ditto.
+
 2005-02-24  Peter O'Gorman  <peter@pogma.com>
 
-	* libtool.m4 (AC_LIBTOOL_PROG_LD_SHLIBS): The Portland group's 
-	compiler does not pass --whole-archive. Move gnu ld check for 
+	* libtool.m4 (AC_LIBTOOL_PROG_LD_SHLIBS): The Portland group's
+	compiler does not pass --whole-archive. Move gnu ld check for
 	the flag to the top so it can be overridden.
 	(AC_LIBTOOL_LANG_CXX_CONFIG): Unset whole_archive_flag_spec for
 	the portland group's c++ compiler too.
diff --git a/libltdl/Makefile.am b/libltdl/Makefile.am
index 3c4e604ad..73397da06 100644
--- a/libltdl/Makefile.am
+++ b/libltdl/Makefile.am
@@ -37,5 +37,5 @@ ltdldatadir = $(datadir)/libtool/libltdl
 install-data-local:
 	-rm -rf $(DESTDIR)$(ltdldatadir)
 	$(mkinstalldirs) $(DESTDIR)$(ltdldatadir)
-	$(AMTAR) cf - $(DISTFILES) \
+	$(AMTAR) chof - $(DISTFILES) \
 	  | ( cd $(DESTDIR)$(ltdldatadir) && $(AMTAR) xf -; )
diff --git a/libtoolize.in b/libtoolize.in
index 5efcc8f60..bba03a91c 100644
--- a/libtoolize.in
+++ b/libtoolize.in
@@ -293,7 +293,7 @@ for file in $ltdlfiles; do
 
   $rm $file
   if test -n "$ln_s" && $ln_s $pkgdatadir/$file $file; then :
-  elif { ( cd $pkgdatadir && $tar cf - $file 2> /dev/null; ) \
+  elif { ( cd $pkgdatadir && $tar chof - $file 2> /dev/null; ) \
       | $tar xf - > /dev/null 2>&1; } ; then :
   elif $cp $pkgdatadir/$file $file; then :
   else