Files
ecrou/crates
vhaudiquet 1e69044198 fix(extract): resolve whiteout paths like every other entry
Whiteout markers trusted the archive's own path, so a crafted
`.wh.` entry carrying `..` could delete host directories above
the rootfs. Both branches now go through `safe_join`, and a
`.wh..` marker, whose target is the parent directory itself, is
refused with them.
2026-10-29 22:41:43 +01:00
..