Skip to content

Tarfile ignores an error when trying to extract a directory on top of a file #114959

Closed

Description

@serhiy-storchaka

Bug report

During review of #112966 and #103263 I found inconsistency between zipfile and tarfile. When zipfile tries to extract a directory on top of an existing file, it fails. When tarfile tries to extract a directory on top of an existing file, it silently returns, keeping an existing file. This is an obvious bug in tarfile.

Both modules should be more cautious when extract on top of symlinks, but this is a different issue.

Linked PRs

Activity

  1. added
    type-bugAn unexpected behavior, bug, or error
    3.11only security fixes
    3.12only security fixes
    3.13only security fixes
    on Feb 3, 2024
  2. added 3 commits that reference this issue on Feb 3, 2024
  3. added 2 commits that reference this issue on Feb 3, 2024
  4. added 2 commits that reference this issue on Feb 3, 2024
  5. added a commit that references this issue on Feb 11, 2024
  6. added a commit that references this issue on Feb 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

3.11only security fixes3.12only security fixes3.13only security fixestype-bugAn unexpected behavior, bug, or error

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions