[Hackage] #747: symlinks in sdists
#747: symlinks in sdists ----------------------------+----------------------------------------------- Reporter: igloo | Owner: Type: defect | Status: new Priority: normal | Milestone: Component: Cabal library | Version: 1.6.0.3 Severity: normal | Keywords: Difficulty: unknown | Ghcversion: Platform: | ----------------------------+----------------------------------------------- Should hackage reject tarballs that contain symlinks? Or broken symlinks? I just ran across a broken symlink in ipprint 0.4: {{{ ipprint-0.4/.#ipprint.cabal -> gleb@gleb.kiev.zoral.com.ua.3270:1271836339 }}} -- Ticket URL: http://hackage.haskell.org/trac/hackage/ticket/747 Hackage http://haskell.org/cabal/ Hackage: Cabal and related projects
#747: symlinks in sdists ----------------------------+----------------------------------------------- Reporter: igloo | Owner: Type: defect | Status: new Priority: normal | Milestone: Component: Cabal library | Version: 1.6.0.3 Severity: normal | Keywords: Difficulty: unknown | Ghcversion: Platform: | ----------------------------+----------------------------------------------- Comment(by duncan): The new server code uses the tar package to validate the format of uploaded tarballs. We could also add a check for symlinks that point to entries outside of the tarball. -- Ticket URL: http://hackage.haskell.org/trac/hackage/ticket/747#comment:1 Hackage http://haskell.org/cabal/ Hackage: Cabal and related projects
participants (1)
-
Hackage