#!/bin/bash # # Copyright (C) 2014 Alexander Larsson # Copyright (C) 2018 Red Hat, Inc. # # SPDX-License-Identifier: LGPL-2.0+ # # This library is free software; you can redistribute it and/or # modify it under the terms of the GNU Lesser General Public # License as published by the Free Software Foundation; either # version 2 of the License, or (at your option) any later version. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public # License along with this library; if not, write to the # Free Software Foundation, Inc., 59 Temple Place - Suite 330, # Boston, MA 02111-1307, USA. set -euo pipefail . $(dirname $0)/libtest.sh echo '1..1' setup_test_repository "bare" cd ${test_tmpdir} tar xf ${test_srcdir}/ostree-path-traverse.tar.gz rm -rf repo2 ostree_repo_init repo2 --mode=archive if ${CMD_PREFIX} ostree --repo=repo2 pull-local --untrusted ostree-path-traverse/repo pathtraverse-test 2>err.txt; then fatal "pull-local unexpectedly succeeded" fi assert_file_has_content_literal err.txt 'Invalid / in filename ../afile' echo "ok untrusted pull-local path traversal"