Repository navigation

import/export-tar: harden the PAX header handling - #10589

Open

ThomasWaldmann wants to merge 9 commits into

borgbackup:masterfrom

ThomasWaldmann:import-tar-hardening

Open

import/export-tar: harden the PAX header handling#10589
ThomasWaldmann wants to merge 9 commits into
borgbackup:masterfrom
ThomasWaldmann:import-tar-hardening

Commits on Nov 3, 2026
- pax_time_to_ns: clamp before converting, catch decimal.Overflow
  
  ThomasWaldmann
  and
  claude
  committed
  e4430a1
- export-tar: skip xattrs with a non-UTF-8 name, warn about it
  
  ThomasWaldmann
  and
  claude
  committed
  e6169a8
- import-tar: reject malformed POSIX ACL entries from PAX headers
  
  ThomasWaldmann
  and
  claude
  committed
  cf8af9f
- import-tar: do not crash on a pax mtime of inf or nan
  
  ThomasWaldmann
  and
  claude
  committed
  eb55c70
- import-tar: warn about unknown user/group names in POSIX ACLs
  
  ThomasWaldmann
  and
  claude
  committed
  9c264c7
- export-tar docs: say what the PAX and GNU formats do not transfer
  
  ThomasWaldmann
  and
  claude
  committed
  71788c2
- tests: check the atime PAX header in test_roundtrip_pax_timestamps
  
  ThomasWaldmann
  and
  claude
  committed
  813e38d
Commits on Nov 4, 2026
- TarfileObjectProcessors: require the warning callback
  
  ThomasWaldmann
  and
  claude
  committed
  f1502e2
- tests: fix the new PAX tests on Windows
  
  ThomasWaldmann
  and
  claude
  committed
  b2d09de