Re: [Haskell-cafe] Ongoing IHG work to improve Hackage security

On Thu, 2015-04-16 at 15:56 +0200, Mikhail Glushenkov wrote:

Hi,

On 16 April 2015 at 15:34, Duncan Coutts wrote:

...

Compliant tar tools (including the standard unix tools, and cabal-install) understand this and take the last entry in the archive as the current file content.

Thanks. I looked at the code again, and while this is not explicitly mentioned in comments, we get this behaviour for free by relying on Map.fromList.

Sorry, I should have added more comments there. I was aware of this issue when I wrote the tar package (indeed I found out more about the history of the tar format than is really healthy for anyone). -- Duncan Coutts, Haskell Consultant Well-Typed LLP, http://www.well-typed.com/