Patch-ID# 101327-08 Keywords: security bug append tape tar group uid gid verbose extract table option Synopsis: SunOS 5.3: security and miscellaneous tar fixes Date: Oct/12/94 Solaris Release: 2.3 SunOS release: 5.3 Unbundled Product: Unbundled Release: Topic: SunOS 5.3: security and miscellaneous tar fixes BugId's fixed with this patch: 1145463 1147599 1133794 1155315 1165021 1163699 1173855 1171561 1175114 Changes incorporated in this version: 1171561 1175114 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/sbin/static/tar /usr/sbin/tar Problem Description: 1171561 The -h option to the tar command does not follow links during extraction 1175114 tar, under 2.x, no longer preserves the orig time and date stamp on dirs This patch corrects 2 tar problems. 1) tar did not follow symbolic links during extraction. It used to do this in 4.x. Now if you specify the -h flag, tar will now follow symbolic links during extraction. 2) tar did not restore the original time and date, as stored in the archive, for directories. It used to do this in 4.x. This has been fixed. (from 101327-07) 1173855 Tar command can't handle correctly any file whose fullpath exceeds 100 in length The extract (x) and table (t) options were not correctly matching filenames specified on the command line whenever that pathname exceeded 99 characters in length. So, whereas "tar xf a.tar ./a/b/test" would succeed in extracting the file "./a/b/test" from a.tar, the command "tar xf a.tar .//test" (where represents a directory specification at least 93 characters long) would not. This patch removes this inconsistency. (from 101327-06) 1165021 patch 101327 -04 ,-05 cause problem with piping to tar with verbose option File transfers using "tar cvf - | tar xvf -" experience data corruption due to an error introduced in pathch 101327-04. This patch fixes that error. 1163699 tar dumps core when the -o option is specified (from 101327-05) 1155315 tar with -u or -r option does not work The -r and -u options (which cause output to be appended to an existing archive) did not work for disk-based archives. When one of these options was specifed, an error message appeared. This patch fixes this problem. (from 101327-04) 1133794 tar complains if gid not in /etc/group and refuses to set uid and gid tar complains both when creating an archive and when extracting if the gid of a file isn't in /etc/group. since tar should be storing the numeric gid, it certainly shouldn't be complaining on extraction, and I'm not sure this even warrants a complaint when creating an archive. # touch xxx # chgrp 567 xxx # tar cf xxx.tar xxx tar: could not get group information for xxx # rm xxx # tar xfvp xxx.tar x xxx, 0 bytes, 0 tape blocks tar: problem reading group entry tar: xxx: group not changed # ls -lg xxx -rw-rw-r-- 1 root staff 0 Oct 10 00:57 xxx This problem occurs on Solaris 2.1 and Solaris 2.2. (from 101327-03) 1147599 tar -r doesn't work on 8mm and 4mm tape drives Attempts to use the -r and -u options of tar to append to an existing archive on an 8mm or 4mm tape failed under Solaris 2.2 and Solaris 2.3. This patch allows tar -r and tar -u to work on the 4mm tape drive. (There appears to be firmware limitations on the 8mm drives that prevent this from working on those devices.) (from 101327-02) This patch is being reissued to remove a symbolic link in the SUNWcsu patch package (from 101327-01) 1145463 security bug Will be filled in by security folks. Patch Installation Instructions: -------------------------------- Generic 'installpatch' and 'backoutpatch' scripts are provided within each patch package with instructions appended to this section. Other specific or unique installation instructions may also be necessary and should be described below. Special Install Instructions: ----------------------------- none