Messages in this thread | | | From | Andreas Gruenbacher <> | Subject | Re: patch-2.7.3 no longer applies relative symbolic link patches | Date | Sat, 31 Jan 2015 21:27:37 +0000 (UTC) |
| |
On Tue, 27 Jan 2015 15:47:04 +0000, Andreas Gruenbacher wrote: > On Mon, 26 Jan 2015 13:50:10 -0800, Linus Torvalds wrote: >> I _think_ we allow arbitrary symlinks to be created, but then we should >> be careful about actually _following_ them. > > I would prefer to allow arbitrary symlinks even in GNU patch, but patch > still must not be allowed to leave the working directory. The only way > to achieve that I can think of is to implement path traversal in user > space, which is not so easy to do correctly and efficiently.
This should be working in patch-2.7.4 now.
Andreas
| |