Hacker GitHub

← All repos

cyphar/filepath-securejoin

View on GitHub ↗ ★ 115 Go

Proposed filepath.SecureJoin implementation

4 mentions on Hacker News by 3 people: 0 stories, 4 comments · first 2019-05-28 · latest 2026-05-25

Mentions per year 4 mentions · busiest year 2019 (2)
20082026
AllStoriesComments NewestTopOldest
  1. Agreed. Not a direct answer but this should be interesting: https://github.com/cyphar/filepath-securejoin
    comment by d0vs · 2026-05-25 · in My minimal, memory-safe Go rsync steers clear of vulnerabilities
  2. …[7]: https://github.com/opencontainers/runc/issues?q=race+conditi... [8]: https://github.com/cyphar/filepath-securejoin [9]: https://github.com/opencontainers/runc/pull/2207 [10]: https://github.com/opencontainers/runc/issues/2128
    comment by lima · 2020-06-18 · in Gocker: Docker implemented in 1.3k lines of Go
  3. …for older kernels after all. Yup, this is why I'm planning on getting a sane API available in < https://github.com/cyphar/filepath-securejoin> which projects can use so that the correct thing is done with both old and new kernels. Right…
    comment by cyphar · 2019-05-28 · in Docker is vulnerable to a symlink-race attack
  4. …pass around handles (which are O_PATH fds). But, as I mentioned in TFA, the plan is to rework https://github.com/cyphar/filepath-securejoin to have a sane API that detects attacks on older kernels while using the new kernel bits (once…
    comment by cyphar · 2019-05-28 · in Docker is vulnerable to a symlink-race attack