the binary package is a "tar bomb"

SRI-CSL / PVS

The People's Verification System

http://pvs.csl.sri.com

GNU General Public License v2.0

135 stars 32 forks source link

the binary package is a "tar bomb" #43

Closed jwaldmann closed 7 years ago

jwaldmann commented 9 years ago

(this is a minor nitpick, but still ...) the file is named pvs-6.0-ix86_64-Linux-sbclisp.tgz but it extracts to bin, lib, etc. cf. http://www.linfo.org/tarbomb.html

dddejan commented 8 years ago

I've experienced this several times. It would be great if this can be fixed for future releases.

samowre commented 7 years ago

This is fixed in pvs 7.0. A pre-release is available in http://www.csl.sri.com/~owre/drop/pvs-snapshots