Fix symlink escape vulnerabilities in safe_copy and log file reading - #1049

Closed

mlim19 wants to merge 9 commits into

fix-symlink-escape-vulnerability

Commits on Jul 23, 2026

Fix symlink escape vulnerabilities in safe_copy and log file reading

mlim19
and
claude
committed
a86d3ed
Fix fd leak, preserve file permissions, and improve portability in safe_copy

mlim19
and
claude
committed
37c222a

Commits on Jul 24, 2026

Fix flaky Zing test: skip on network-related Docker build failures
Copilot
authored
e7d696a
Fix fd leak in safe_copy and safe_read_text when os.fdopen fails
Copilot
authored
46b7cfe
Improve safe_copy error handling and document O_NOFOLLOW platform behavior
Copilot
authored
dab1e1f
Simplify safe_read_text to use O_NOFOLLOW atomically without redundant lstat pre-check
Copilot
authored
d873da7
Clean up safe_copy and safe_read_text: simplify pre-cleanup, add O_NOFOLLOW constant, clarify rename behavior
Copilot
authored
5e3f80b
Fix error messages and improve build log inspection for network error detection
Copilot
authored
fc624d9
Simplify dst_tmp cleanup: unlink directly and rely on O_EXCL for atomicity
Copilot
authored
3aab8fe