]> git.ipfire.org Git - thirdparty/tar.git/commit
Fix extracting over symlinks with --dereference master
authorSergey Poznyakoff <gray@gnu.org>
Thu, 11 Jun 2026 13:33:15 +0000 (16:33 +0300)
committerSergey Poznyakoff <gray@gnu.org>
Thu, 11 Jun 2026 13:35:20 +0000 (16:35 +0300)
commit145a671e8ad0f2443e253ea4cc95b676ed7a2847
tree56ac8f9934f3cb2e29387cfda44b778a1b1eabdb
parentcb1973cc0ee1f0cf3cd72fbf4732bc7f7d1b334d
Fix extracting over symlinks with --dereference

Extraction over symlink to a directory was broken in 75b03fdff4.
See https://savannah.gnu.org/bugs/index.php?68368

* src/tar.c (decode_options): Don't enable RESOLVE_BENEATH mode
if --dereference is given.
* tests/extrac33.at: New test.
* tests/Makefile.am: Add new test.
* tests/testsuite.at: Likewise.
* tests/extrac13.at: Add a keyword.
* tests/extrac31.at: Remove --absolute-names keyword: that option
is never used in the testcase. Add CVE-2025-45582 keyword instead.
src/tar.c
tests/Makefile.am
tests/extrac13.at
tests/extrac31.at
tests/extrac33.at [new file with mode: 0644]
tests/testsuite.at