[Bug 13891] New: cpio: do not process input files larger than 4 GB

bugzilla at busybox.net bugzilla at busybox.net
Thu Jul 1 13:58:15 UTC 2021


https://bugs.busybox.net/show_bug.cgi?id=13891

            Bug ID: 13891
           Summary: cpio: do not process input files larger than 4 GB
           Product: Busybox
           Version: 1.33.x
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Other
          Assignee: unassigned at busybox.net
          Reporter: tobias at stoeckmann.org
                CC: busybox-cvs at busybox.net
  Target Milestone: ---

Created attachment 9026
  --> https://bugs.busybox.net/attachment.cgi?id=9026&action=edit
cpio.patch

The file size is casted to a 32 bit unsigned data type. If the input
file is 4 GB or larger, the size field is truncated.

If the input file contains cpio headers at the correct position, then
the extraction of such a created cpio archive leads to unexpected
output.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the busybox-cvs mailing list