From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755574AbbAaV1t (ORCPT ); Sat, 31 Jan 2015 16:27:49 -0500 Received: from plane.gmane.org ([80.91.229.3]:54440 "EHLO plane.gmane.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752475AbbAaV1r (ORCPT ); Sat, 31 Jan 2015 16:27:47 -0500 X-Injected-Via-Gmane: http://gmane.org/ To: linux-kernel@vger.kernel.org From: Andreas Gruenbacher Subject: Re: patch-2.7.3 no longer applies relative symbolic link patches Date: Sat, 31 Jan 2015 21:27:37 +0000 (UTC) Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 80-110-112-196.cgn.dynamic.surfer.at User-Agent: Pan/0.139 (Sexual Chocolate; GIT bf56508 git://git.gnome.org/pan2) Cc: git@vger.kernel.org Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 27 Jan 2015 15:47:04 +0000, Andreas Gruenbacher wrote: > On Mon, 26 Jan 2015 13:50:10 -0800, Linus Torvalds wrote: >> I _think_ we allow arbitrary symlinks to be created, but then we should >> be careful about actually _following_ them. > > I would prefer to allow arbitrary symlinks even in GNU patch, but patch > still must not be allowed to leave the working directory. The only way > to achieve that I can think of is to implement path traversal in user > space, which is not so easy to do correctly and efficiently. This should be working in patch-2.7.4 now. Andreas