Re: [LinuxBIOS] PATCH: mkdirp() error on new directory outside given parent

[Uwe Hermann]

On Thu, Jul 12, 2007 at 05:33:57PM +0200, Peter Stuge wrote:
> On Thu, Jul 12, 2007 at 02:49:36PM +0200, Stefan Reinauer wrote:
> > Peter Stuge  [070712 09:50]:
> > > Have a look.
> >
> > I think the better way would be to check the paths for ../ and skip
> > those with a warning.
>
> Then there are the symlinks. :\

Yeah, this stuff is horribly hard to get right. Security issues like
these are found even in really mature and stable software (coreutils,
tar, etc.) again and again...

Uwe.