mirror of
https://github.com/openwrt/packages.git
synced 2026-05-31 06:51:51 +08:00
dc83108af4
1.0.1 fixes a false-positive path-traversal check in destinations.py: the 1.0.0 code used Path.resolve() to validate that each installed file stays within the --destdir, but Path.resolve() follows symlinks. OpenWrt's staging dir and toolchain directories contain many symlinks, so resolved paths could escape the destdir comparison and trigger: ValueError: Attempting to write <file> outside of the target directory 1.0.1 replaces Path.resolve() with os.path.abspath(), which normalises the path without following symlinks, eliminating the false positive. Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>