From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Bavier Subject: Re: [PATCH] tar bombs and muscle Date: Sat, 16 Jan 2016 22:29:54 -0600 Message-ID: <20160116222954.6ae74288@openmailbox.org> References: <569AEE9B.6070709@uq.edu.au> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45295) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aKeyv-0003NQ-VI for guix-devel@gnu.org; Sat, 16 Jan 2016 23:30:26 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aKeys-0001e1-Ow for guix-devel@gnu.org; Sat, 16 Jan 2016 23:30:25 -0500 Received: from smtp28.openmailbox.org ([62.4.1.62]:38283) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aKeys-0001dx-Fi for guix-devel@gnu.org; Sat, 16 Jan 2016 23:30:22 -0500 In-Reply-To: <569AEE9B.6070709@uq.edu.au> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Ben Woodcroft Cc: "guix-devel@gnu.org" On Sun, 17 Jan 2016 11:30:03 +1000 Ben Woodcroft wrote: > There is a somewhat popular bioinformatics program muscle whose download > tgz is a tar bomb. The bomb moniker seems especially appropriate here, > since it made the gnu-build-system error out, and patching > gnu-build-system requires a lot of rebuilding. In the attached patches I > fixed gnu-build-system so that the "chdir" is omitted when there is no > directory to chdir into, and then added muscle itself. See https://lists.gnu.org/archive/html/guix-devel/2016-01/msg00165.html I think it might be what you're looking for. `~Eric