4 ms·
Here's my favorite (from GNU tar): /* Parse base-64 output produced only by tar test versions 1.13.6 (1999-08-11) through 1.13.11 (1999-08-23).
by cxr 4y ago
Here's my favorite (from GNU tar):
/* Parse base-64 output produced only by tar test versions
1.13.6 (1999-08-11) through 1.13.11 (1999-08-23).
Support for this will be withdrawn in future releases. */
<http://git.savannah.gnu.org/cgit/tar.git/tree/src/list.c?id=705bb093174004275009510bdaab6e8046ab37f8#n845 http://git.savannah.gnu.org/cgit/tar.git/tree/src/list.c?id=...>
- brynet 4y agoOne of my favourites, archive filenames containing a colon ':' character cause GNU tar to execute a command, historically rsh (remote shell), but thanks to the Linux alternatives system, is often aliased to ssh. This was added many years ago to support remote tape drives. GNU tar might randomly make network connections, so sanitize your archive names, I guess..
- jakeogh 4y agoI had to check that because it sounds too "execute arb shell scripts on dhcp lease" to still be there... but there it is... decades later and --force-local not the default? It's almost worse that rsh isn't installed on most systems. pledge(2) is the correct model.
- NullPrefix 4y agoNo no, don't remove that. You might not use the test tar version, but you may still have tarballs produced by that version.