Note that modern versions of "patch" already do symlink protection.
I think this means you could drop this "-l" check in Patch.pm.
>From http://git.savannah.gnu.org/cgit/patch.git/tree/NEWS ...
Changes in version 2.7.5:
* There are users which expect patch to follow symbolic links in the
Package: dpkg
Version: 1.18.4ubuntu1.4
Severity: normal
scripts/Dpkg/Source/Patch.pm has the following code:
while (1) {
if (-l $path) {
error(g_('diff %s modifies file %s through a symlink: %s'),
$diff, $fn{$key}, $path);
}
$diff is a patch
2 matches
Mail list logo
