[ODBC-285] Connector/ODBC binary tarballs tarbomb the user Created: 2020-05-28  Updated: 2020-06-30  Resolved: 2020-06-08

Status: Closed
Project: MariaDB Connector/ODBC
Component/s: General
Affects Version/s: 3.1.7
Fix Version/s: 3.1.9

Type: Bug Priority: Major
Reporter: Geoff Montee (Inactive) Assignee: Lawrin Novitsky
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
Relates
relates to CONCPP-11 Connector/C++ binary tarballs tarbomb... Closed

 Description   

The MariaDB Connector/ODBC binary tarball currently tarbombs the user. The binary tarball does not have a top-level directory for all of its files:

$ tar -tzvf mariadb-connector-odbc-3.1.7-ga-debian-x86_64.tar.gz 
-rw-r--r-- buildbot/buildbot 59816 2020-04-07 13:53 lib/mariadb/plugin/auth_gssapi_client.so
 
-rw-r--r-- buildbot/buildbot 55088 2020-04-07 13:53 lib/mariadb/plugin/caching_sha2_password.so
 
-rw-r--r-- buildbot/buildbot 335096 2020-04-07 13:53 lib/mariadb/plugin/client_ed25519.so
 
-rw-r--r-- buildbot/buildbot  42744 2020-04-07 13:53 lib/mariadb/plugin/dialog.so
 
-rw-r--r-- buildbot/buildbot  32880 2020-04-07 13:53 lib/mariadb/plugin/mysql_clear_password.so
 
-rw-r--r-- buildbot/buildbot  45296 2020-04-07 13:53 lib/mariadb/plugin/sha256_password.so
 
-rw-r--r-- buildbot/buildbot  26530 2020-04-07 13:53 share/doc/mariadb-connector-odbc/COPYING
 
-rw-r--r-- buildbot/buildbot    291 2020-04-07 13:53 share/doc/mariadb-connector-odbc/README
 
-rw-r--r-- buildbot/buildbot 2295400 2020-04-07 13:53 lib/libmaodbc.so

See here for a description of tarbombing and why it is bad:

http://www.linfo.org/tarbomb.html

 Comments   
Comment by Lawrin Novitsky [ 2020-06-08 ]

Commit 20cd73b. CPACK_ARCHIVE_COMPONENT_INSTALL set to ON happened to be the reason.
From now on, bintars will have directories tree under
mariadb-connector-odbc-<version>-<platform> - basically it will match
the file name.

Generated at Thu Feb 08 03:27:34 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.