Add tests for invalid file names in NARs

Browse source

Note: in general, we rely on the OS to tell us if a name is invalid or
if two names normalize in the same way. But for security, we do want
to make sure that we catch '.', '..', slashes and NUL characters. (NUL
characters aren't really a security issue, but since they would be
truncated when we pass them to the OS, it would be canonicity problem.)

...

This commit is contained in:

Eelco Dolstra 2024-09-12 14:58:33 +02:00

parent 48477d4a3e

commit 421aa1add1

6 changed files with 20 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

tests/functional/empty.nar Normal file

View file

Binary file not shown.