[LinuxBIOS] PATCH: mkdirp() error on new directory outside given parent

Peter Stuge peter at stuge.se
Thu Jul 12 11:09:26 CEST 2007


On Thu, Jul 12, 2007 at 10:57:08AM +0200, Stefan Reinauer wrote:
> > Make mkdirp() abort directory creation and return an error if a
> > directory in dirpath is located outside the specified parent
>  
> Are you trying to avoid an exploit, or what is it needed for?

Right. But it was much more of a mess than I first thought. I forgot
that realpath() only works when the full path already exists.


> mkdirp should not be changed to take other parameters than this: 
> http://docsun.cites.uiuc.edu/sun_docs/C/solaris_9/SUNWaman/hman3gen/mkdirp.3gen.html

Aye.


//Peter




More information about the coreboot mailing list