guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH] tar bombs and muscle


From: Ben Woodcroft
Subject: Re: [PATCH] tar bombs and muscle
Date: Sun, 17 Jan 2016 16:27:53 +1000
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0



On 17/01/16 14:29, Eric Bavier wrote:
On Sun, 17 Jan 2016 11:30:03 +1000
Ben Woodcroft <address@hidden> wrote:

There is a somewhat popular bioinformatics program muscle whose download
tgz is a tar bomb. The bomb moniker seems especially appropriate here,
since it made the gnu-build-system error out, and patching
gnu-build-system requires a lot of rebuilding. In the attached patches I
fixed gnu-build-system so that the "chdir" is omitted when there is no
directory to chdir into, and then added muscle itself.
See https://lists.gnu.org/archive/html/guix-devel/2016-01/msg00165.html

I think it might be what you're looking for.
It is thanks, I'd not seen that. I wonder if an error message mentioning that might be in order, given it is easy to test for. Anyway, I'll wait until that change is merged.

ben



reply via email to

[Prev in Thread] Current Thread [Next in Thread]