New submission from jvoisin <jvoi...@google.com>:
The attached file produces the following stacktrace when opened via
`tarfile.open` and iterated with `TarFile.getmembers`, on Python 3.7.5rc1:
```
$ cat tarrepro.py
import tarfile
import sys
with tarfile.open(sys.argv[1]) as t:
for member in t.getmembers():
pass
```
```
$ python3 tarrepro.py
crash-7221297307ab37ac87be6ea6dd9b28d4d453c557aa3da8a2138ab98e015cd42a
Traceback (most recent call last):
File "tarrepro.py", line 5, in <module>
for member in t.getmembers():
File "/usr/lib/python3.7/tarfile.py", line 1763, in getmembers
self._load() # all members, we first have to
File "/usr/lib/python3.7/tarfile.py", line 2350, in _load
tarinfo = self.next()
File "/usr/lib/python3.7/tarfile.py", line 2281, in next
self.fileobj.seek(self.offset - 1)
ValueError: cannot fit 'int' into an offset-sized integer
```
This file isn't a valid tar file, it was created by a fuzzer.
----------
components: Library (Lib)
files: crash-7221297307ab37ac87be6ea6dd9b28d4d453c557aa3da8a2138ab98e015cd42a
messages: 358472
nosy: jvoisin
priority: normal
severity: normal
status: open
title: ValueError in TarFile.getmembers
type: behavior
versions: Python 3.7
Added file:
https://bugs.python.org/file48781/crash-7221297307ab37ac87be6ea6dd9b28d4d453c557aa3da8a2138ab98e015cd42a
_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue39062>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
