On Friday, December 6, 2019, Eli Schwartz <eschwa...@archlinux.org> wrote: > libarchive bsdtar works, which I guess means that libarchive permits you > to wrap a tarball in *two* layers of gzip compression, then extract the > contents. Personally, I would claim this is a buggy design goal, because > you'd have to be nuts to create tarballs with multiple layers of > recursive compression. >
I think it's also good to mention that allowing extraction of multiple layers of compression could lead to a security risk (DoS) for tar. There are specifically crafted gzip archives on the Internet meant to crash (or stress) antivirus scanners with multiple layers of compression. And there is also a thing called "gzip quine". I think it's a right choice for tar to reject it at first. If users wants decompressing multiple layers, they can do it with a shell script loop.
_______________________________________________ busybox mailing list busybox@busybox.net http://lists.busybox.net/mailman/listinfo/busybox