From bdc119d630f28b27d34c6fc04b9252c0de624fa4 Mon Sep 17 00:00:00 2001
From: Catherine <whitequark@whitequark.org>
Date: Sat, 20 Sep 2025 15:42:06 +0000
Subject: [PATCH] Remove leading `.` path segments from tar archive member
 filenames.

---
 src/extract.go | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/src/extract.go b/src/extract.go
index 882dbfc..1e853ab 100644
--- a/src/extract.go
+++ b/src/extract.go
@@ -28,7 +28,17 @@ func ExtractTar(reader io.Reader) (*Manifest, error) {
 			return nil, err
 		}
 
-		fileName := strings.TrimSuffix(header.Name, "/")
+		// For some reason, GNU tar includes any leading `.` path segments in archive filenames,
+		// unless there is a `..` path segment anywhere in the input filenames.
+		fileName := header.Name
+		for {
+			if strippedName, found := strings.CutPrefix(fileName, "./"); found {
+				fileName = strippedName
+			} else {
+				break
+			}
+		}
+
 		manifestEntry := Entry{}
 		switch header.Typeflag {
 		case tar.TypeReg:
@@ -48,6 +58,7 @@ func ExtractTar(reader io.Reader) (*Manifest, error) {
 
 		case tar.TypeDir:
 			manifestEntry.Type = Type_Directory.Enum()
+			fileName = strings.TrimSuffix(fileName, "/")
 
 		default:
 			AddProblem(&manifest, fileName, "unsupported type '%c'", header.Typeflag)