GNU bug report logs - #8343
ustar archive tests are incorrect with overly large UID/GID

Previous Next

Package: automake;

Reported by: Tom Rini <tom_rini <at> mentor.com>

Date: Fri, 25 Mar 2011 17:04:01 UTC

Severity: normal

Tags: patch

Merged with 13588

Done: Stefano Lattarini <stefano.lattarini <at> gmail.com>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 8343 in the body.
You can then email your comments to 8343 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to owner <at> debbugs.gnu.org, bug-automake <at> gnu.org:
bug#8343; Package automake. (Fri, 25 Mar 2011 17:04:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Tom Rini <tom_rini <at> mentor.com>:
New bug report received and forwarded. Copy sent to bug-automake <at> gnu.org. (Fri, 25 Mar 2011 17:04:01 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tom Rini <tom_rini <at> mentor.com>
To: <bug-automake <at> gnu.org>
Subject: ustar archive tests are incorrect with overly large UID/GID
Date: Fri, 25 Mar 2011 09:56:58 -0700
When the user has a UID or GID that is larger than the ustar format 
supports, pax does not error out gracefully in some cases (FC13).  In 
this case cpio does.

-- 
Tom Rini
Mentor Graphics Corporation




Information forwarded to bug-automake <at> gnu.org:
bug#8343; Package automake. (Tue, 08 Nov 2011 17:24:02 GMT) Full text and rfc822 format available.

Message #8 received at 8343 <at> debbugs.gnu.org (full text, mbox):

From: "Herbert, Marc" <marc.herbert <at> intel.com>
To: "8343 <at> debbugs.gnu.org" <8343 <at> debbugs.gnu.org>
Subject: hangs the whole configure script
Date: Tue, 8 Nov 2011 16:45:55 +0000
When "configure" is run by a user with an UID bigger than 21bits, BSD
pax 3.4 aborts when trying to create the conftest.tar test archive and
leaves an empty or corrupted conftest.tar file behind. In the next
step, pax tries to extract this incomplete or corrupted archive and

 *this hangs the whole ./configure script forever*

  => I do not think "normal" is enough as a severity


configure:NNN: pax -r <conftest.tar
pax: Cannot identify format. Searching...
pax: End of archive volume 1 reached

ATTENTION! pax archive volume change required.
Ready for archive volume: 1
Input archive name or "." to quit pax.
Archive name > 


Note: GNU cpio 2.9 pretends to pass the test but it is a LIE: it
silently truncates any big UID to its lower 21 bits. I don't know what
can be the consequences of this lie.


Some background
---------------

- POSIX 1988 "ustar" format is defined with *fixed size* fields. There
  is notably a 21 bits limit (2097151) for the uid and the gid.

- POSIX 2001 "pax" format (also sometimes known as... "posix") has
  additional attributes of unlimited length. However, as of today
  support for this format is scarce. GNU tar 1.20 claims support yet
  breaks on big user IDs. Despite its name, BSD pax 3.4 does not offer
  any 2001 "pax" support at all, see discussion here:
  <https://bugzilla.redhat.com/show_bug.cgi?id=503860>

Only a couple of non-portable formats ("star", "gnutar", ...) seem to
actually support big user IDs today.

I think there is currently a design issue in automake/m4/tar.m4
considering that a ustar archive should should *never* succeed when
./configure is run from a big user ID.

-------------------------------------------------------------
Intel Ireland Limited (Branch)
Collinstown Industrial Park, Leixlip, County Kildare, Ireland
Registered Number: E902934

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.





Added tag(s) patch. Request was from Stefano Lattarini <stefano.lattarini <at> gmail.com> to control <at> debbugs.gnu.org. (Sun, 17 Feb 2013 15:35:03 GMT) Full text and rfc822 format available.

Merged 8343 13588. Request was from Stefano Lattarini <stefano.lattarini <at> gmail.com> to control <at> debbugs.gnu.org. (Sun, 17 Feb 2013 15:35:03 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Wed, 29 May 2013 11:24:03 GMT) Full text and rfc822 format available.

This bug report was last modified 12 years and 75 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.