X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=entry.c;h=06d24f14c6ba9401637aebfb11659ae747796c06;hb=5fd898141ce2a243abf75192c9a55cb0a4e1ba80;hp=d3e86c722a6663a65f69b73621f57aa6331a5e5b;hpb=bb0c8065f167a29e22f22e6e1355096395475430;p=git.git

diff --git a/entry.c b/entry.c
index d3e86c722..06d24f14c 100644
--- a/entry.c
+++ b/entry.c
@@ -175,6 +175,23 @@ static int write_entry(struct cache_entry *ce, char *path, const struct checkout
 	return 0;
 }
 
+/*
+ * This is like 'lstat()', except it refuses to follow symlinks
+ * in the path, after skipping "skiplen".
+ */
+int check_path(const char *path, int len, struct stat *st, int skiplen)
+{
+	const char *slash = path + len;
+
+	while (path < slash && *slash != '/')
+		slash--;
+	if (!has_dirs_only_path(path, slash - path, skiplen)) {
+		errno = ENOENT;
+		return -1;
+	}
+	return lstat(path, st);
+}
+
 int checkout_entry(struct cache_entry *ce, const struct checkout *state, char *topath)
 {
 	static char path[PATH_MAX + 1];
@@ -188,7 +205,7 @@ int checkout_entry(struct cache_entry *ce, const struct checkout *state, char *t
 	strcpy(path + len, ce->name);
 	len += ce_namelen(ce);
 
-	if (!lstat(path, &st)) {
+	if (!check_path(path, len, &st, state->base_dir_len)) {
 		unsigned changed = ce_match_stat(ce, &st, CE_MATCH_IGNORE_VALID);
 		if (!changed)
 			return 0;