From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adonay Felipe Nogueira Subject: bug#28602: Unpack fails with no error message when using a .zip source Date: Wed, 04 Oct 2017 15:17:13 -0300 Message-ID: <87wp4abwwm.fsf@hyperbola.info> References: <2c2ccbd7-bb47-5292-74d9-e4c7fdc2c990@cock.li> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59675) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzoFD-0002jw-4b for bug-guix@gnu.org; Wed, 04 Oct 2017 14:18:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzoF8-0003cy-52 for bug-guix@gnu.org; Wed, 04 Oct 2017 14:18:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:40502) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dzoF8-0003cu-2A for bug-guix@gnu.org; Wed, 04 Oct 2017 14:18:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dzoF7-0002ZI-TF for bug-guix@gnu.org; Wed, 04 Oct 2017 14:18:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59431) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dzoEV-0002hd-5w for bug-guix@gnu.org; Wed, 04 Oct 2017 14:17:24 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dzoEQ-00030A-8D for bug-guix@gnu.org; Wed, 04 Oct 2017 14:17:23 -0400 Received: from relay4-d.mail.gandi.net ([2001:4b98:c:538::196]:34359) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dzoEQ-0002yn-1g for bug-guix@gnu.org; Wed, 04 Oct 2017 14:17:18 -0400 Received: from adfeno-pc1 (unknown [181.221.159.64]) (Authenticated sender: adfeno@hyperbola.info) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 0F6081720BF for ; Wed, 4 Oct 2017 20:17:14 +0200 (CEST) In-Reply-To: <2c2ccbd7-bb47-5292-74d9-e4c7fdc2c990@cock.li> (nee@cock.li's message of "Mon, 25 Sep 2017 22:10:19 +0200") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 28602@debbugs.gnu.org Does the .zip file have a a single directory on the root? If not, then we can call it a zipbomb/tarbomb. These bombs are bad because they can replace things without notice, and can be very difficult to track what was added. Last time I checked Guix expects only a single directory in the root of the file --- this might have changed, but I didn't test it since one year ago. nee writes: > Hello, > > right now unpacking .zip sources only works when unzip is added as > native input. That's all right, but there is no error message, just: > > starting phase `unpack' > phase `unpack' failed after 0.0 seconds > > It should say something like: > > starting phase `unpack' > Archive with .zip suffix failed to unpack. Please add unzip as > native-input to the package, e.g. (native-inputs `(("unzip" ,unzip))) > phase `unpack' failed after 0.0 seconds > > I tested this in the cmake-build-system --=20 - https://libreplanet.org/wiki/User:Adfeno - Palestrante e consultor sobre /software/ livre (n=C3=A3o confundir com gratis). - "WhatsApp"? Ele n=C3=A3o =C3=A9 livre. Por favor, use o GNU Ring ou o Tox. - Contato: https://libreplanet.org/wiki/User:Adfeno#vCard - Arquivos comuns aceitos (apenas sem DRM): Corel Draw, Microsoft Office, MP3, MP4, WMA, WMV. - Arquivos comuns aceitos e enviados: CSV, GNU Dia, GNU Emacs Org, GNU GIMP, Inkscape SVG, JPG, LibreOffice (padr=C3=A3o ODF), OGG, OPUS, PDF (apenas sem DRM), PNG, TXT, WEBM.