[issue39062] ValueError in TarFile.getmembers

2019-12-23 Thread jvoisin
jvoisin added the comment: Raising an except is ok, if it's documented, so I know which ones I should catch to prevent my program to quit when processing untrusted files, without having to catch `Exception`. Reliability is important in my use-case as well, not only exploitable

[issue39062] ValueError in TarFile.getmembers

2019-12-20 Thread Terry J. Reedy
Terry J. Reedy added the comment: jvoisin, please consider rerunning such reproducers with lastest 3.8 and 3.9 before submitting. It is much easier for you to do so when you have the fuzz file, script, and command line already present. -- ___

[issue39062] ValueError in TarFile.getmembers

2019-12-20 Thread Terry J. Reedy
Terry J. Reedy added the comment: jvoisin, what do you consider to be the bug? Raising an exception is exactly the right thing to do on bad input. I leave it to others to decide if this should be closed as 'not a bug' or if the internal exception should be caught and replaced. We don't

[issue39062] ValueError in TarFile.getmembers

2019-12-20 Thread Terry J. Reedy
Terry J. Reedy added the comment: See #39065, #39067 for similar tarfile issues. -- nosy: +terry.reedy ___ Python tracker ___ ___

[issue39062] ValueError in TarFile.getmembers

2019-12-20 Thread Terry J. Reedy
Change by Terry J. Reedy : -- nosy: +lars.gustaebel, serhiy.storchaka ___ Python tracker ___ ___ Python-bugs-list mailing list

[issue39062] ValueError in TarFile.getmembers

2019-12-16 Thread jvoisin
New submission from jvoisin : The attached file produces the following stacktrace when opened via `tarfile.open` and iterated with `TarFile.getmembers`, on Python 3.7.5rc1: ``` $ cat tarrepro.py import tarfile import sys with tarfile.open(sys.argv[1]) as t: for member in t.getmembers():