[
https://issues.apache.org/jira/browse/COMPRESS-657?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17805224#comment-17805224
]
Sebastian Schuberth commented on COMPRESS-657:
----------------------------------------------
Well, https://pypi.org/project/orjson/ says "Apache-2.0 OR MIT", but
https://github.com/ijl/orjson#license says "Apache-2.0 AND MIT". I've asked for
clarification at https://github.com/ijl/orjson/issues/448. In any case, it's a
permissive license.
Would a draft PR at https://github.com/apache/commons-compress/pulls with a
failing test be sufficient?
> TarArchiveEntry is both a file and a directory
> ----------------------------------------------
>
> Key: COMPRESS-657
> URL: https://issues.apache.org/jira/browse/COMPRESS-657
> Project: Commons Compress
> Issue Type: Bug
> Affects Versions: 1.25.0
> Reporter: Sebastian Schuberth
> Priority: Minor
>
> The archive at
> https://files.pythonhosted.org/packages/ac/4a/43daa65b7ed984612267983039a58703c48ccbc62561abb43ec7bc8b0663/orjson-3.7.8.tar.gz
> contains the entry {{orjson-3.7.8/include}} for which both
> {{TarArchiveEntry.isDirectory}} and {{TarArchiveEntry.isFile}} return
> {{true}}, whereas the entry is really only a directory. This results in code
> that tries to extract file entries to fail, as the output stream for the
> directory entry cannot be opened.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
