DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 55CJfTv5707360
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 72B7B386B7D7
Message-ID: <02a15f0d-233e-44e2-840c-023877457d69@SystematicSW.ab.ca>
Date: Thu, 12 Jun 2025 13:40:10 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Path prefix //./ in Cygwin
To: cygwin@cygwin.com
References: <93fd79f3-bb39-79c2-8e78-57c4af356e54@jdrake.com>
 <2fcf0555-2ea5-41d1-bd42-68fab89a189a@gmx.com>
 <b4cbb08a-52b8-fd53-f85b-825b465cd61a@jdrake.com>
Content-Language: en-CA
Organization: Systematic Software
In-Reply-To: <b4cbb08a-52b8-fd53-f85b-825b465cd61a@jdrake.com>
Precedence: list
From: Brian Inglis via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Brian Inglis <Brian.Inglis@SystematicSW.ab.ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces~archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On 2025-06-11 18:57, Jeremy Drake via Cygwin wrote:
> On Thu, 12 Jun 2025, Sam Edge via Cygwin wrote:
> 
>> I would think that if you're building something against Cygwin, it's probably
>> best to assume it's POSIX where only forward-slash is special and not try to
>> second-guess.
> 
> This is unsafe, and actually where the rust PR started out.  If you only
> treat '/' as special, a program may be tricked into allowing path
> traversal with file/directory names like '..\..' or 'C:\Windows' which
> are not path traversing or absolute paths in POSIX.

Depending on their repetition or handling, these could either be treated as 
quoted single character backslashes \. or backslash special characters mapped 
into the Unicode BMP (Basic Multilingual Plane) PUA (Private Use Area) U+0E000+ 
as \u005c -> \U0E05c.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher  but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple