Hi!

On Sat, 2014-04-05 at 11:12:55 +0200, Niels Thykier wrote:
> Package: dpkg
> Version: 1.17.6
> Severity: minor

> dpkg-deb creates the tarfiles inside a .deb using tar -T without using
> --no-unquote.  This can cause issues when a filename contains one or
> more "\"-characters, as tar will strip one level of blackslahes (due
> to --unqoute being the default).
> 
> Thus a file named \\ will be renamed to \ in the process (and
> e.g. "\a" becomes "a"[1]).  If this causes two files to have the same
> name, tar will consider of them a hardlink of other (discarding its
> content, as it is assumed to be the same as the other one).
> 
> I have filed this as "minor", since (to my knowledge) the only
> packages containing files affected by this are found solely in the
> Lintian test suite[2].

Nice catch, thanks, fixed in my local tree and will be included in my
next push targetting 1.17.7, which should hopefully happen *this*
weekend, if the final testing and re-reviews look good.

Regards,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to