No, it's not resolved.

I was applying this patch to the package in Debian, but after looking a
bit closer I'm not so sure anymore. The problem that the patch attempts
to solve is that th_get_pathname() in some cases (namely, if
gnu_longname is not set) strdup()s a local buffer. But th_get_pathname()
is a part of the public API, so all applications that use libtar might
get *more* memory leaks until they are updated. And they can't free the
memory unless they know that it's malloc()ed, so it's an incompatible
change.

Then there's the similar function th_get_pathname(), which never returns
a strdup()ed string.

Another suggestion is to make the buffer static:
http://downloads.diy-linux.org/patches/OLD/PM/libtar-1.2.11.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/41804

Title:
  Major memory leak

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to