Fix: Delete existing file before extracting to handle read-only files

Co-authored-by: slachiewicz <[email protected]>

Author: Copilot

src/main/java/org/codehaus/plexus/archiver/AbstractUnArchiver.java

@@ -38,8 +38,6 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
-import static java.nio.file.StandardCopyOption.REPLACE_EXISTING;
-
 // TODO there should really be constructors which take the source file.
 
 /**
@@ -324,7 +322,12 @@ protected void extractFile(
             } else if (isDirectory) {
                 targetFileName.mkdirs();
             } else {
-                Files.copy(compressedInputStream, targetFileName.toPath(), REPLACE_EXISTING);
+                // Delete existing file first to handle read-only files
+                // This matches the behavior of tar and unzip
+                if (targetFileName.exists()) {
+                    targetFileName.delete();
+                }
+                Files.copy(compressedInputStream, targetFileName.toPath());
             }
 
             targetFileName.setLastModified(entryDate.getTime());

src/test/java/org/codehaus/plexus/archiver/AbstractUnArchiverTest.java

@@ -188,4 +188,33 @@ void shouldExtractWhenCasingDifferOnlyInEntryNamePath(@TempDir File temporaryFol
         assertTrue(abstractUnArchiver.shouldExtractEntry(temporaryFolder, file, entryName, entryDate));
         assertEquals(0, abstractUnArchiver.casingMessageEmitted.get());
     }
+
+    @Test
+    void shouldExtractReadOnlyFile(@TempDir File temporaryFolder) throws Exception {
+        // given
+        File readOnlyFile = new File(temporaryFolder, "readonly.txt");
+        readOnlyFile.createNewFile();
+        java.nio.file.Files.write(readOnlyFile.toPath(), "original content".getBytes());
+
+        // Make the file read-only (simulate -r-xr-xr-x permissions)
+        readOnlyFile.setWritable(false);
+        assertTrue(readOnlyFile.exists());
+        assertFalse(readOnlyFile.canWrite());
+
+        // Create a mock input stream with new content
+        String newContent = "new content";
+        java.io.InputStream inputStream = new java.io.ByteArrayInputStream(newContent.getBytes());
+
+        // when
+        abstractUnArchiver.setOverwrite(true);
+        abstractUnArchiver.extractFile(
+                null, temporaryFolder, inputStream, "readonly.txt", new Date(), false, null, null, null);
+
+        // then
+        // The file should have been successfully overwritten
+        assertTrue(readOnlyFile.exists());
+        byte[] actualBytes = java.nio.file.Files.readAllBytes(readOnlyFile.toPath());
+        String actualContent = new String(actualBytes);
+        assertEquals(newContent, actualContent);
+    }
 }