Re: buffer overflow in GNU tar-1.13

[Bernhard Rosenkraenzer]

On Fri, 19 Jan 2001, Antonomasia wrote:

> From: Bernhard Rosenkraenzer <address@hidden>
>
> > Current versions of tar (1.13.17, 1.13.18) are not affected.
>
> > bash-2.04$ tar cvf localhost:/`perl -e 'print "A"x5000;'` /tmp tar:
>
> Did you try lengths around 50-100 chars (under PATH_MAX and such) ?

Yes.

> Do RH tar patches fix this ?   (I confirmed it this morning on
> a pristine GNU tar 1.13)

No, a pristine 1.13.18 works, as well.

LLaP
bero