NetBSD-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
bin/52295: find -delete: "relative path not safe" with absolute paths ...
>Number: 52295
>Category: bin
>Synopsis: find -delete: "relative path not safe" with absolute paths ...
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Tue Jun 13 09:10:00 +0000 2017
>Originator: Anthony Mallet
>Release: NetBSD 7.0.1, 7.99.75 -current as well
>Organization:
>Environment:
NetBSD fluffy64-netbsd7 7.0.1 NetBSD 7.0.1 (FLUFFY) #0: Tue Jun 7 14:30:24 CEST 2016 root@fluffy64-netbsd6:/usr/obj/sys/arch/amd64/compile/FLUFFY amd64
>Description:
/usr/bin/find /<path> -delete raises an error when given an absolute path.
This happens in usr.bin/find/function.c:467
/* Potentially unsafe - do not accept relative paths whatsoever */
if (strchr(entry->fts_accpath, '/') != NULL)
errx(1, "-delete: %s: relative path potentially not safe",
entry->fts_accpath);
I understand that the intent is to filter out slashes from anything that `find` would append to the user input <path>, however this is getting in the way in this case :)
>How-To-Repeat:
$ which find
/usr/bin/find
$ mkdir /tmp/test
$ find /tmp/test -delete
find: -delete: /tmp/test: relative path potentially not safe
$
While this is fine:
$ cd /tmp/test
$ find . -delete
$
>Fix:
Home |
Main Index |
Thread Index |
Old Index