lib/checkout: Validate pathnames during checkout
authorColin Walters <walters@verbum.org>
Fri, 12 Jan 2018 15:40:36 +0000 (10:40 -0500)
committerAtomic Bot <atomic-devel@projectatomic.io>
Fri, 12 Jan 2018 19:38:34 +0000 (19:38 +0000)
commitf3ae36ff4360c58158963ca2c20862ae94ac0775
treec0739dff19b99f0c52079df6fc38df53b8b3394e
parent2b78df25f469f01f96616ac3bcb5bc17bd68ab2e
lib/checkout: Validate pathnames during checkout

While we do protect against path traversal during pull, let's also validate
during checkout; it's a cheap operation and provides good last-mile protection.

Closes: #1412
Approved by: jlebon
src/libostree/ostree-repo-checkout.c
tests/test-corruption.sh