Working draft

Go containerd archive.Apply

Version
containerd v2.4.2, archive.Apply, of go1.27.3

This implementation follows the default policy in 36 of 78 cases:

The default policy is a working draft. Where an implementation does not do as it says, that can be a choice rather than a bug.

On the other 42, it does not:

!Accepts cases to reject (42)

casewhat it iswhat it makes of it
F03 end-lone-zero-blockAn end-of-archive marker of one zero block, not two.extracts a (2 B, 87428fc5)
F04 end-missingNo end-of-archive marker: the archive ends after a complete member.extracts a (2 B, 87428fc5)
F06 checksum-signedA checksum that only matches as the signed sum of the header.extracts a (2 B, 87428fc5)
F07 end-archive-afterAnother archive after the end-of-archive marker.extracts a (2 B, 87428fc5)
F10 extended-pax-size-before-gnu-longA pax size followed by a GNU long name: which of them does the size apply to?extracts long-name (512 B, 917dba8e)
F11 magic-odd-versionThe POSIX magic with a version that is neither 00 nor NULs.extracts a (2 B, 87428fc5)
F13 pax-newline-in-pathA newline in a pax path, which split on lines is another record.extracts good\x0a1 path=evil (12 B, a578eb49)
F15 pax-size-on-dirA pax size on a directory, which takes the next header for its data.extracts dir/, dir/smuggled (0 B, e3b0c442)
F19 pax-global-between-extended-and-memberA global pax header between an extended header and its member.extracts header-name (12 B, a578eb49)
F20 pax-global-sizeA global pax header with a size, which frames every member after it, or none.extracts a (0 B, e3b0c442), smuggled (0 B, e3b0c442)
F21 pax-size-emptyAn empty pax size, which in POSIX removes the size rather than giving one.extracts a (512 B, 917dba8e)
F23 pax-size-plusA pax size with a plus sign, +512, which conversions of strings to numbers accept.extracts a (512 B, 917dba8e)
F26 pax-size-leading-zeroA pax size with a leading zero, 0777: 777 in decimal, as POSIX says, or 511 in octal.extracts a (777 B, b09d2516)
F28 pax-newline-in-commentA newline in a pax comment, which split on lines leaves a size record.extracts a (0 B, e3b0c442), smuggled (0 B, e3b0c442)
F33 size-on-dirA size in the header of a directory, which takes the next header for its data.extracts dir/, dir/smuggled (0 B, e3b0c442)
F34 size-on-hardlinkA size in the header of a hard link, in a pax archive, which takes the next header for its data.extracts a (2 B, 87428fc5), h (2 B, 87428fc5), smuggled (0 B, e3b0c442)
F35 pax-size-on-hardlinkA pax size on a hard link, which takes the next header for its data.extracts a (2 B, 87428fc5), h (2 B, 87428fc5), smuggled (0 B, e3b0c442)
N08 extended-pax-path-and-gnu-long-nameA pax path and a GNU long name for one member, and a third name in its header.extracts from-gnu (12 B, a578eb49)
N09 extended-two-pax-headersTwo pax extended headers for one member, with different paths.extracts second (12 B, a578eb49)
N10 format-starA ustar prefix whose end reads as star's times, with star's tar\0 at offset 508.extracts ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp/, ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp/a (2 B, 87428fc5)
N11 gnu-prefix-fieldThe prefix field of a header with GNU magic, which GNU tar uses for times in incremental archives.extracts a (2 B, 87428fc5)
N12 name-absoluteAn absolute name, which points outside the directory the archive is extracted to.extracts tmp/, tmp/tar-minefield-absolute (89 B, 3b7f22a5)
N13 name-backslashA backslash in a name: a character on Unix, a separator on Windows.extracts a\b (21 B, 15acfc39)
N14 name-bytes-after-nulBytes after the NUL that ends a name.extracts a (10 B, ef476e8d)
N16 name-dotdotA name with .., which climbs out of the directory the archive is extracted to.extracts tar-minefield-escaped (85 B, fc503701)
N17 name-emptyA member with an empty name.extracts nothing
N18 name-not-utf8A name that is not UTF-8.extracts caf\xe9 (8 B, ff3f1fa3)
N20 pax-repeated-keyOne pax key twice in one extended header.extracts second (12 B, a578eb49)
N21 pax-global-pathA global pax header with a path.extracts a (2 B, 87428fc5), b (2 B, 02638299)
N22 pax-path-emptyAn empty pax path, which in POSIX removes the path rather than giving one.extracts from-header (12 B, a578eb49)
N23 extended-gnu-long-then-paxA GNU long name, then a pax header, then the member: which of them does the long name apply to?extracts from-gnu (12 B, a578eb49)
N24 pax-hdrcharset-binaryhdrcharset=BINARY, which declares a pax path that is not UTF-8 as bytes.extracts caf\xe9 (12 B, a578eb49)
N26 pax-global-path-then-emptyA global path, then a global header that removes it with an empty value.extracts a (12 B, a578eb49)
K01 kind-trailing-slash-fileA regular file whose name ends in a slash: a file, or a directory?extracts a (0 B, e3b0c442)
K02 linkname-on-fileA regular file with a link target.extracts a (19 B, bc345849)
K03 symlink-trailing-slashA symlink whose name ends in a slash.extracts link → target, target/
S06 hardlink-to-symlinkA hardlink to a symlink: a link to the symlink, or to its target?extracts f (2 B, 092fcfbb), h → f, s → f
S07 tree-duplicate-file-differsThe same file twice, with different contents: the first copy, or the last?extracts a (5 B, 761d1fb1)
S08 tree-duplicate-file-dirA file, then a directory of the same name.extracts a/
S09 tree-duplicate-file-identicalThe same file twice, with the same contents.extracts a (5 B, a6328afc)
S10 tree-symlink-then-fileA symlink, then a file of the same name: replace the link, or write through it?extracts a (28 B, d5a04bbb)
S11 tree-through-symlinkA member written through a symlink, which points out of the destination.extracts d → .., tar-minefield-through-symlink (89 B, 3b7f22a5)