[ 
https://issues.apache.org/jira/browse/COMPRESS-603?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17510087#comment-17510087
 ] 

Matt Sicker commented on COMPRESS-603:
--------------------------------------

Alright, I finally had a chance to verify this, and I can confirm that your 
commit fixes the issue. I reproduced the problem with a basic unit test which 
fails with 1.21 but passes with a snapshot of 1.22. Thanks!

> Expander does not support archives with archive entries beginning with ./
> -------------------------------------------------------------------------
>
>                 Key: COMPRESS-603
>                 URL: https://issues.apache.org/jira/browse/COMPRESS-603
>             Project: Commons Compress
>          Issue Type: Bug
>          Components: Archivers
>    Affects Versions: 1.21
>            Reporter: Matt Sicker
>            Priority: Major
>         Attachments: test.tar.gz
>
>
> Suppose I create a tar file from a directory like so:
>  
> {code:java}
> tar -cf foo.tar ./foo{code}
> When I try to extract the tar entries using the Expander class, that throws a 
> java.io.IOException: Expanding ./ would create file outside of ...
> When I create the tar file without the leading ./, then Expander doesn't 
> complain.
>  



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to