tar@6.1.8

3 files changed, 6 insertions, 3 deletions

diff --git a/node_modules/tar/lib/path-reservations.js b/node_modules/tar/lib/path-reservations.js
index 1929ac9c2..167447af0 100644
--- a/node_modules/tar/lib/path-reservations.js
+++ b/node_modules/tar/lib/path-reservations.js
@@ -8,6 +8,7 @@
 
 const assert = require('assert')
 const normPath = require('./normalize-windows-path.js')
+const { join } = require('path')
 
 module.exports = () => {
   // path => [function or Set]
@@ -19,9 +20,8 @@ module.exports = () => {
   const reservations = new Map()
 
   // return a set of parent dirs for a given path
-  const { join } = require('path')
   const getDirs = path =>
-    normPath(join(path)).split('/').slice(0, -1).reduce((set, path) =>
+    path.split('/').slice(0, -1).reduce((set, path) =>
       set.length ? set.concat(normPath(join(set[set.length - 1], path)))
       : [path], [])
 
@@ -99,6 +99,7 @@ module.exports = () => {
   }
 
   const reserve = (paths, fn) => {
+    paths = paths.map(p => normPath(join(p)).toLowerCase())
     const dirs = new Set(
       paths.map(path => getDirs(path)).reduce((a, b) => a.concat(b))
     )
diff --git a/node_modules/tar/lib/unpack.js b/node_modules/tar/lib/unpack.js
index 329501595..cf10d0734 100644
--- a/node_modules/tar/lib/unpack.js
+++ b/node_modules/tar/lib/unpack.js
@@ -220,6 +220,8 @@ class Unpack extends Parser {
         const linkparts = normPath(entry.linkpath).split('/')
         if (linkparts.length >= this.strip)
           entry.linkpath = linkparts.slice(this.strip).join('/')
+        else
+          return false
       }
     }
 
diff --git a/node_modules/tar/package.json b/node_modules/tar/package.json
index c95b771b3..42f55d035 100644
--- a/node_modules/tar/package.json
+++ b/node_modules/tar/package.json
@@ -2,7 +2,7 @@
   "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
   "name": "tar",
   "description": "tar for node",
-  "version": "6.1.7",
+  "version": "6.1.8",
   "repository": {
     "type": "git",
     "url": "https://github.com/npm/node-tar.git"