S17 hardlink-then-file-againA file, a hardlink to it, then the file again: does the link keep the first contents?
Reject(draft) A strict parser must reject this archive.
S17-hardlink-then-file-again.tar |
test archive, 3,584 bytes
sha256 834795bd27a67915b7970e766af7f2fbd8cffcf8be4903e4d7315b3988e8774f |
S17-hardlink-then-file-again.json | expected result |
S17-hardlink-then-file-again.txt | annotated blocks |
S17-hardlink-then-file-again.py | generator script |
The archive has a file a that contains first, then a hardlink b to a, then a file a that contains second.
A hardlink is a second name for a file archived before it, and an existing file can be overwritten. In POSIX, it is not specified whether a file is overwritten in place, with the new contents written into it, or replaced, with a new file in its place. If a is overwritten in place, a and b are still one file, so b contains second. If a is replaced, b keeps the old file, which contains first. This case is ambiguous because b contains either first or second, and a contains second either way.
Decision point: whether a file is overwritten in place or replaced.
Seen in: 87 of the scanned tarballs have the same file twice, but none of them has a hardlink.
Every block of 512 bytes, to scale, with its offset. Hover over a field for its bytes.
S17-hardlink-then-file-again: must reject
A file, a hardlink to it, then the file again: does the link keep the first contents?
The archive has a file `a` that contains `first`, then a hardlink `b` to `a`, then a file `a` that
contains `second`.
A hardlink is a second name for a file archived before it, and an existing file can be
overwritten. In POSIX, it is not specified whether a file is overwritten in place, with
the new contents written into it, or replaced, with a new file in its place. If `a` is overwritten
in place, `a` and `b` are still one file, so `b` contains `second`. If `a` is replaced, `b` keeps
the old file, which contains `first`. This case is ambiguous because `b` contains either `first` or
`second`, and `a` contains `second` either way.
Decision point: whether a file is overwritten in place or replaced.
Seen in: 87 of the scanned tarballs have the same file twice, but none of them has a hardlink.
See also: S07, the same file twice with different contents, and S15, a file, then a hardlink of
the same name.
0x000000 header: regular file
name [ 0,100) "a" + 99 NUL
mode [100,108) "0000644" + NUL 644 (octal)
uid [108,116) "0000000" + NUL 0
gid [116,124) "0000000" + NUL 0
size [124,136) "00000000006" + NUL 6
mtime [136,148) "00000000000" + NUL 0
chksum [148,156) "007344\0 " 3812: the unsigned sum of the header, this field as spaces
typeflag [156,157) "0" regular file
linkname [157,257) 100 NUL
magic [257,263) "ustar" + NUL
version [263,265) "00"
uname [265,297) 32 NUL
gname [297,329) 32 NUL
devmajor [329,337) "0000000" + NUL 0
devminor [337,345) "0000000" + NUL 0
prefix [345,500) 155 NUL
pad [500,512) 12 NUL
0x000200 data
6 bytes, then 506 NUL to the end of the block
"first\n"
0x000400 header: hardlink
name [ 0,100) "b" + 99 NUL
mode [100,108) "0000644" + NUL 644 (octal)
uid [108,116) "0000000" + NUL 0
gid [116,124) "0000000" + NUL 0
size [124,136) "00000000000" + NUL 0
mtime [136,148) "00000000000" + NUL 0
chksum [148,156) "007501\0 " 3905: the unsigned sum of the header, this field as spaces
typeflag [156,157) "1" hardlink
linkname [157,257) "a" + 99 NUL
magic [257,263) "ustar" + NUL
version [263,265) "00"
uname [265,297) 32 NUL
gname [297,329) 32 NUL
devmajor [329,337) "0000000" + NUL 0
devminor [337,345) "0000000" + NUL 0
prefix [345,500) 155 NUL
pad [500,512) 12 NUL
0x000600 header: regular file, a again, with other contents
name [ 0,100) "a" + 99 NUL
mode [100,108) "0000644" + NUL 644 (octal)
uid [108,116) "0000000" + NUL 0
gid [116,124) "0000000" + NUL 0
size [124,136) "00000000007" + NUL 7
mtime [136,148) "00000000000" + NUL 0
chksum [148,156) "007345\0 " 3813: the unsigned sum of the header, this field as spaces
typeflag [156,157) "0" regular file
linkname [157,257) 100 NUL
magic [257,263) "ustar" + NUL
version [263,265) "00"
uname [265,297) 32 NUL
gname [297,329) 32 NUL
devmajor [329,337) "0000000" + NUL 0
devminor [337,345) "0000000" + NUL 0
prefix [345,500) 155 NUL
pad [500,512) 12 NUL
0x000800 data
7 bytes, then 505 NUL to the end of the block
"second\n"
0x000a00 2 zero blocks: the end-of-archive marker
0x000e00 end of file
As xxd writes it: xxd -r makes the archive of it.
00000000: 6100 0000 0000 0000 0000 0000 0000 0000 a............... 00000010: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000020: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000040: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000050: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000060: 0000 0000 3030 3030 3634 3400 3030 3030 ....0000644.0000 00000070: 3030 3000 3030 3030 3030 3000 3030 3030 000.0000000.0000 00000080: 3030 3030 3030 3600 3030 3030 3030 3030 0000006.00000000 00000090: 3030 3000 3030 3733 3434 0020 3000 0000 000.007344. 0... 000000a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000000b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000000c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000000d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000000e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000000f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000100: 0075 7374 6172 0030 3000 0000 0000 0000 .ustar.00....... 00000110: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000120: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000130: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000140: 0000 0000 0000 0000 0030 3030 3030 3030 .........0000000 00000150: 0030 3030 3030 3030 0000 0000 0000 0000 .0000000........ 00000160: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000170: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000180: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000190: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000001f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000200: 6669 7273 740a 0000 0000 0000 0000 0000 first........... 00000210: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000220: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000230: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000240: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000250: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000260: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000270: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000280: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000290: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000002f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000300: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000310: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000320: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000330: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000340: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000350: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000360: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000370: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000380: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000390: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000003f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000400: 6200 0000 0000 0000 0000 0000 0000 0000 b............... 00000410: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000420: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000430: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000440: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000450: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000460: 0000 0000 3030 3030 3634 3400 3030 3030 ....0000644.0000 00000470: 3030 3000 3030 3030 3030 3000 3030 3030 000.0000000.0000 00000480: 3030 3030 3030 3000 3030 3030 3030 3030 0000000.00000000 00000490: 3030 3000 3030 3735 3031 0020 3161 0000 000.007501. 1a.. 000004a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000004b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000004c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000004d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000004e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000004f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000500: 0075 7374 6172 0030 3000 0000 0000 0000 .ustar.00....... 00000510: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000520: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000530: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000540: 0000 0000 0000 0000 0030 3030 3030 3030 .........0000000 00000550: 0030 3030 3030 3030 0000 0000 0000 0000 .0000000........ 00000560: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000570: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000580: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000590: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000005f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000600: 6100 0000 0000 0000 0000 0000 0000 0000 a............... 00000610: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000620: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000630: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000640: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000650: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000660: 0000 0000 3030 3030 3634 3400 3030 3030 ....0000644.0000 00000670: 3030 3000 3030 3030 3030 3000 3030 3030 000.0000000.0000 00000680: 3030 3030 3030 3700 3030 3030 3030 3030 0000007.00000000 00000690: 3030 3000 3030 3733 3435 0020 3000 0000 000.007345. 0... 000006a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000006b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000006c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000006d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000006e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000006f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000700: 0075 7374 6172 0030 3000 0000 0000 0000 .ustar.00....... 00000710: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000720: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000730: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000740: 0000 0000 0000 0000 0030 3030 3030 3030 .........0000000 00000750: 0030 3030 3030 3030 0000 0000 0000 0000 .0000000........ 00000760: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000770: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000780: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000790: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000007f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000800: 7365 636f 6e64 0a00 0000 0000 0000 0000 second.......... 00000810: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000820: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000830: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000840: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000850: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000860: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000870: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000880: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000890: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000008f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000900: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000910: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000920: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000930: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000940: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000950: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000960: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000970: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000980: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000990: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 000009f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a00: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a10: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a20: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a30: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a40: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a50: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a60: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a70: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a80: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000a90: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ab0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ad0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000af0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b00: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b10: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b20: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b30: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b40: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b50: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b60: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b70: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b80: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000b90: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000bb0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000bd0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000be0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000bf0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c00: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c10: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c20: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c30: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c40: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c50: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c60: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c70: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c80: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000c90: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ca0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000cb0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000cd0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000cf0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d00: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d10: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d20: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d30: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d40: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d50: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d60: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d70: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d80: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000d90: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000da0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000db0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000dd0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000de0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 00000df0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
In the outcome column, ✅ means that the implementation follows the default policy.
| implementation | version | outcome | what it makes of it |
|---|---|---|---|
| GNU tar | tar (GNU tar) 1.35 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| bsdtar | bsdtar 3.8.11 - libarchive 3.8.11 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| BusyBox tar | BusyBox v1.38.0, defconfig | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| 7-Zip | 7-Zip (z) 26.05 (x64) | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| Python tarfile, filter=data, as in pip | CPython 3.15.2 | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| Python tarfile, filter=tar | CPython 3.15.2 | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| Python tarfile, filter=fully_trusted | CPython 3.15.2 | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| node-tar | tar 7.5.22 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| node-tar, strict | tar 7.5.22 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| tar-fs | tar-fs 3.1.3, on tar-stream 3.2.2 | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| Java Commons Compress | Commons Compress 1.28.0, Expander, on Java 27.0.1.0.2 | ⚠️ accepts | tree C: a (7 B, 480c2336), b (0 B, e3b0c442) |
| .NET System.Formats.Tar | System.Formats.Tar of .NET 10.0.14, ExtractToDirectory | ✅ rejects | error: IOException: Cannot create 'DEST/a' because a file or directory with the same name already exists. |
| PHP PharData, as in Composer | PharData of PHP 8.5.12, as Composer's TarDownloader calls it | ⚠️ accepts | tree C: a (7 B, 480c2336), b (0 B, e3b0c442) |
| Go containerd archive.Apply | containerd v2.4.2, archive.Apply, of go1.27.3 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| Rust tar | tar 0.4.46, unpack | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| Rust astral-tokio-tar | astral-tokio-tar 0.7.1, unpack | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| Rust tar-codec, as in uv | tar-codec 0.0.16, with the policies of uv 0.13 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| RubyGems | RubyGems 4.0.20 of Ruby 4.0.9, extract_tar_gz | ⚠️ accepts | tree D: a (7 B, 480c2336) |
| R untar, internal | utils::untar of R 4.6.2, tar = "internal" | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| Perl Archive::Tar | Archive::Tar 3.12 of Perl v5.44.0 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| Haskell tar | tar 0.7.2.0, extract, of GHC 9.14 | ⚠️ accepts | tree B: a (7 B, 480c2336), b (7 B, 480c2336) |
| Julia Tar.jl | Tar 1.10.0 of Julia 1.13.3 | ⚠️ accepts | tree A: a (7 B, 480c2336), b (6 B, b640e840) |
| live-bootstrap untar | mescc-tools-extra a151c245e512, as live-bootstrap pins it | ✅ rejects | error: unable to create hardlinks |
| live-bootstrap untar, --non-strict | mescc-tools-extra a151c245e512, as live-bootstrap pins it | ⚠️ accepts | tree D: a (7 B, 480c2336) |
The table below shows how many release tarballs have the features of this test case. The default policy rejects all of them.
| ecosystem | tarballs | with it | share |
|---|---|---|---|
| Spack | 37,553 | 17 | 0.05% |
| nixpkgs | 18,990 | 59 | 0.31% |
| Guix | 10,168 | 17 | 0.17% |
| PyPI | 10,000 | 3 | 0.03% |
| crates.io | 5,000 | 0 | none |
| RubyGems | 5,000 | 4 | 0.08% |
| live-bootstrap | 171 | 0 | none |
| total (distinct) | 82,586 | 87 | 0.11% |
The scan finds the same file twice, and does not compare the contents of the copies: some of these may differ, as in S07.
See the list of these 87 tarballs, with the sha256 of each and an example from it.
S07: the same file twice with different contents, and S15, a file, then a hardlink of the same name.