When rejecting rediculously large pax attributes (such as pathnames

over 1MB), issue a warning instead of forcing an internal assertion
failure.

1 files changed, 5 insertions, 2 deletions

diff --git a/lib/libarchive/archive_read_support_format_tar.c b/lib/libarchive/archive_read_support_format_tar.c
index 1c22763..1db3e8f 100644
--- a/lib/libarchive/archive_read_support_format_tar.c
+++ b/lib/libarchive/archive_read_support_format_tar.c
@@ -1020,8 +1020,11 @@ pax_header(struct archive *a, struct tar *tar, struct archive_entry *entry,
 				return (-1);
 			line_length *= 10;
 			line_length += *p - '0';
-			if (line_length > 999999)
-				return (-1);
+			if (line_length > 999999) {
+				archive_set_error(a, ARCHIVE_ERRNO_MISC,
+				    "Rejecting pax extended attribute > 1MB");
+				return (ARCHIVE_WARN);
+			}
 			p++;
 			l--;
 		}