[Bug-tar] Heap-based buffer overflow in xheader.c:188:xheader_set_keyword_equal().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a heap-based buffer overflow: -- cut -- $ ~/tar-asan/src/tar --pax-option== = ==28267==ERROR: AddressSanitizer: heap-buffer-overflow on

[Bug-tar] Heap-based buffer overflow in transform.c:276:parse_transform_expr().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a heap-based buffer overflow: -- cut -- $ ~/tar-asan/src/tar --transform="s///" = ==4615==ERROR: AddressSanitizer: heap-buffer-overflow

[Bug-tar] NULL pointer dereference in create.c:511:start_private_header().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a NULL pointer dereference: -- cut -- $ /home/s1m0n/tar/tar-asan/src/tar --update -f ./emptyfile --pax-option=listopt="" AddressSanitizer:DEADLYSIGNAL =

[Bug-tar] Use-after-free in misc.c:399:strtosysint().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command with the attached test-case will cause a use-after-free: -- cut -- $ ~/tar-asan/src/tar -d -f none -g ./uaf_2.tar /home/s1m0n/tar/tar-asan/src/tar: ./uaf_2.tar:1: Invalid time stamp: Invalid argument /home/s1m0n

[Bug-tar] Heap-based buffer overflow in suffix.c:105:strip_compression_suffix().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a heap-based buffer overflow: -- cut -- $ ~/tar-asan/src/tar -f .bz2 --one-top-level = ==31469==ERROR: AddressSanitizer: heap-buffer-ove

[Bug-tar] Use-after-free in names.c:1297:name_match().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a use-after-free: -- cut -- $ touch none ; tar -cf bla.tar . ; /home/s1m0n/tar/tar-asan/src/tar -d -f bla.tar -K ./none = ==15682==ERROR

[Bug-tar] Heap-based buffer overflow in names.c:1824:collect_and_sort_names().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following command will cause a heap-based buffer overflow: -- cut -- $ ~/tar-asan/src/tar -c -f none --add-file= -g none = ==7359==ERROR: AddressSanitizer: heap-buff

[Bug-tar] Heap-based buffer overflow in xheader.c:{316, 344, 358}:xheader_format_name().

Hi All, I'd like to report a defect in tar v1.30. Execution of the following commands will cause a heap-based buffer overflows: -- cut -- $ ~/tar-asan/src/tar -c -f none --pax-option=globexthdr.name="%%",listopt="" none SUMMARY: AddressSanitizer: heap-buffer-overflow /home/s1m0n/tar/tar-asan