Re: [RFH/PATCH] prefix_path(): disallow absolute paths

From

Johannes Schindelin <johannes.schindelin@gmx.de>

Date

Jan 29, 2008, 02:37 UTC

Message-ID

<alpine.LSU.1.00.0801290234590.23907@racer.site>

In-Reply-To

<7vwspts9vj.fsf@gitster.siamese.dyndns.org>

Hi,

On Mon, 28 Jan 2008, Junio C Hamano wrote:

> If we are touching the prefix_path(), I think we should try to make its 
> "ambiguous path rejection" more complete.

> This is not to be applied (especially before auditing the callers), but 
> to be thought about.  Although it passes all the tests...

It certainly is tempting.

> +			while (c == '/')
> +				c = *src++;
> +			src--;

This is ugly.  I would like this better:

			while (src[1] == '/')
				src++;

> +const char *prefix_path(const char *prefix, int len, const char *path)
> +{
> +	const char *orig = path;
> +	char *sanitized = xmalloc(len + strlen(path) + 1);