add a test case to replicate the issue

Author: noamcohen97

Lib/test/test_tarfile.py

@@ -1679,6 +1679,33 @@ def test_missing_fileobj(self):
             with self.assertRaises(ValueError):
                 tar.addfile(tarinfo)
 
+    @unittest.skipUnless(os_helper.can_symlink(), 'requires symlink support')
+    @unittest.mock.patch('os.chown')
+    @unittest.mock.patch('os.utime')
+    @unittest.mock.patch('os.chmod')
+    def test_deferred_directory_attributes_update(self, mock_chmod, mock_utime, mock_chown):
+        # Regression test for gh-127987: setting attributes on arbitrary files
+        tempdir = os.path.join(TEMPDIR, 'test127987')
+        def mock_chmod_side_effect(path, mode, **kwargs):
+            target_path = os.path.realpath(path)
+            if os.path.commonpath([target_path, tempdir]) != tempdir:
+                raise Exception("should not try to chmod anything outside the destination", target_path)
+        mock_chmod.side_effect = mock_chmod_side_effect
+
+        outside_tree_dir = os.path.join(TEMPDIR, 'outside_tree_dir')
+        with ArchiveMaker() as arc:
+            arc.add('x', symlink_to='.')
+            arc.add('x', type=tarfile.DIRTYPE, mode='?rwsrwsrwt')
+            arc.add('x', symlink_to=('y/' * 99 + '../' * 99 + outside_tree_dir))
+            arc.add('y/' * 99, symlink_to=('../' * 98))
+
+        os.makedirs(outside_tree_dir)
+        try:
+            arc.open().extractall(path=tempdir, filter='tar')
+        finally:
+            os_helper.rmtree(outside_tree_dir)
+            os_helper.rmtree(tempdir)
+
 
 class GzipWriteTest(GzipTest, WriteTest):
     pass