Bug#138569: dpkg can install corrupted *.debs!
Package: dpkg
Version: 1.9.19
Severity: critical
Justification: breaks unrelated software
Hi,
I've got a package, which wasn't fully downloaded:
[525]> sudo dpkg-deb -x kernel-source-2.4.18_2.4.18-3_all.deb /tmp
tar: Unexpected EOF in archive
tar: Unexpected EOF in archive
tar: Error is not recoverable: exiting now
dpkg-deb: subprocess tar returned error exit status 2
BUT dpkg installs the package without any errors:
[526]> dpkg --version | head -1
Debian GNU/Linux `dpkg' package management program version 1.9.19
(i386).
[527]> sudo dpkg -i kernel-source-2.4.18_2.4.18-3_all.deb
(Reading database ... 185032 files and directories currently installed.)
Preparing to replace kernel-source-2.4.18 2.4.18-3 (using
kernel-source-2.4.18_2.4.18-3_all.deb) ...Unpacking replacement
kernel-source-2.4.18 ...
Setting up kernel-source-2.4.18 (2.4.18-3) ...
[528]> echo $?
0
FOR COMPARE:
[529]> /potato/usr/bin/dpkg --version | head -1
Debian GNU/Linux `dpkg' package management program version 1.6.15
(i386).
[530]> sudo /potato/usr/bin/dpkg -i kernel-source-2.4.18_2.4.18-3_all.deb
(Reading database ... 185026 files and directories currently installed.)
Preparing to replace kernel-source-2.4.18 2.4.18-3 (using
kernel-source-2.4.18_2.4.18-3_all.deb) ...Unpacking replacement
kernel-source-2.4.18 ...
dpkg: error processing kernel-source-2.4.18_2.4.18-3_all.deb
(--install):
unexpected EOF in filesystem tarfile - corrupted package archive:
Success
Errors were encountered while processing:
kernel-source-2.4.18_2.4.18-3_all.deb
[531]> echo $?
1
Regards,
Robert
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux vox 2.4.17 #2 nie lut 3 16:15:33 CET 2002 i586
Locale: LANG=C, LC_CTYPE=pl_PL
Versions of packages dpkg depends on:
ii libc6 2.2.5-3 GNU C Library: Shared libraries an
ii libncurses5 5.2.20020112a-5 Shared libraries for terminal hand
ii libstdc++2.10-glibc2.2 1:2.95.4-4 The GNU stdc++ library
Reply to: