]> git.ipfire.org Git - thirdparty/systemd.git/commit
chase: tighten checks on ".." once we hit the root of an CHASE_AT_RESOLVE_IN_ROOT...
authorLennart Poettering <lennart@amutable.com>
Wed, 25 Feb 2026 11:26:42 +0000 (12:26 +0100)
committerLennart Poettering <lennart@amutable.com>
Tue, 3 Mar 2026 07:48:01 +0000 (08:48 +0100)
commit3538b77f9dc139f76561ec88eda17b1df6567c82
tree8ecf7476f2328f55dc3fa341ffc1adca4167f314
parentc8031ff37eb44a1bebb4a2c3ccfae51ac09982a5
chase: tighten checks on ".." once we hit the root of an CHASE_AT_RESOLVE_IN_ROOT root tree

Let's harden things in case concurrent access is allowed to a root tree
passed via CHASE_AT_RESOLVE_IN_ROOT: let's not just validate via the
path if we hit the root of the tree, but also by comparing inodes +
mount ids.

Hardening opportunity reported by Sebastian Wick.
src/basic/chase.c