On Thu, May 17, 2007, David M. Fetter wrote:

> It seems that there is a bug in the 2.7 version of cpio which one of my
> co-workers found.  This is what he writes:
>
> Version 2.7 (the newest released) has the bug. It is fixed in cvs but no
> minor rev has been shipped.
>
> The patch I found is really small to fix the bug I encountered but there
> are a bunch of other changes in cvs since the 2.7 release and I don't
> know how important any of those are for us.
> [...]

The patch terminates a readlink(2) derived buffer and hence correctly
fixes the symlink creation. I've quickly applied it to cpio in CURRENT
as it doesn't hurt to have this bug fixed.

> The bug causes symlinks to point to incorrect locations on copyout. This
> is a serious issue for openpkg since rpms are cpio archives and
> everything we are building can be affected.

No, it isn't problematic for OpenPKG, because although the payload
of our packages are CPIO based, RPM has its own built-in CPIO file
management implementation and hence a bug in GNU cpio does not affect
the OpenPKG packaging at all.

                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com

______________________________________________________________________
OpenPKG                                             http://openpkg.org
User Communication List                      openpkg-users@openpkg.org
  • cpio bug David M. Fetter
    • Re: cpio bug Ralf S. Engelschall

Reply via email to