On Thu, May 17, 2007, David M. Fetter wrote: > It seems that there is a bug in the 2.7 version of cpio which one of my > co-workers found. This is what he writes: > > Version 2.7 (the newest released) has the bug. It is fixed in cvs but no > minor rev has been shipped. > > The patch I found is really small to fix the bug I encountered but there > are a bunch of other changes in cvs since the 2.7 release and I don't > know how important any of those are for us. > [...]
The patch terminates a readlink(2) derived buffer and hence correctly fixes the symlink creation. I've quickly applied it to cpio in CURRENT as it doesn't hurt to have this bug fixed. > The bug causes symlinks to point to incorrect locations on copyout. This > is a serious issue for openpkg since rpms are cpio archives and > everything we are building can be affected. No, it isn't problematic for OpenPKG, because although the payload of our packages are CPIO based, RPM has its own built-in CPIO file management implementation and hence a bug in GNU cpio does not affect the OpenPKG packaging at all. Ralf S. Engelschall [EMAIL PROTECTED] www.engelschall.com ______________________________________________________________________ OpenPKG http://openpkg.org User Communication List openpkg-users@openpkg.org