@kerneldude - any chance you could share your poc (perhaps email it to <email address hidden> rather than post it publicly here)? I have tried creating one via the following but I hit the CLI args limit before I can get an xattr key long enough:
touch bar
tar --pax-option SCHILY.xattr.user.$(python3 -c "print('a'*131048)"):=test -cf poc-crafted.tar bar
@kerneldude - any chance you could share your poc (perhaps email it to <email address hidden> rather than post it publicly here)? I have tried creating one via the following but I hit the CLI args limit before I can get an xattr key long enough:
touch bar xattr.user. $(python3 -c "print( 'a'*131048) "):=test -cf poc-crafted.tar bar
tar --pax-option SCHILY.