Hello!

> I used to be able to commit like this:
>     cvs commit -m"foo changes"  foo.c ../include/foo.h
> After upgrading to CVS 1.10.8, I get this error:
>     protocol error: '..' has too many ..
> This worked in 1.10.1.  Is this a bug, or was it incorporated to fix some 
> other condition?  If so, what was the reason?

I believe this was a quick fix to close a security hole. Instead of
checking that the target directory is still under the allowed root, CVS
just forbids using ".." for some (not fot all) commands.

Regards,
Pavel Roskin

Reply via email to