d1c0ca5260
This wonderfully large commit replaces basically everything under the `server/filesystem` package, re-implementing essentially everything. This is related to https://github.com/pterodactyl/wings/security/advisories/GHSA-494h-9924-xww9 If any vulnerabilities related to symlinks persist after this commit, I will be very upset. Signed-off-by: Matthew Penner <me@matthewp.io>
68 lines
1.6 KiB
Go
68 lines
1.6 KiB
Go
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
// Code in this file was derived from `go/src/os/path.go`.
|
|
|
|
// Copyright 2009 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the `go.LICENSE` file.
|
|
|
|
//go:build unix
|
|
|
|
package ufs
|
|
|
|
import (
|
|
"golang.org/x/sys/unix"
|
|
)
|
|
|
|
// mkdirAll is a recursive Mkdir implementation that properly handles symlinks.
|
|
func (fs *UnixFS) mkdirAll(name string, mode FileMode) error {
|
|
// Fast path: if we can tell whether path is a directory or file, stop with success or error.
|
|
dir, err := fs.Lstat(name)
|
|
if err == nil {
|
|
if dir.Mode()&ModeSymlink != 0 {
|
|
// If the final path is a symlink, resolve its target and use that
|
|
// to check instead.
|
|
dir, err = fs.Stat(name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
if dir.IsDir() {
|
|
return nil
|
|
}
|
|
return convertErrorType(&PathError{Op: "mkdir", Path: name, Err: unix.ENOTDIR})
|
|
}
|
|
|
|
// Slow path: make sure parent exists and then call Mkdir for path.
|
|
i := len(name)
|
|
for i > 0 && name[i-1] == '/' { // Skip trailing path separator.
|
|
i--
|
|
}
|
|
|
|
j := i
|
|
for j > 0 && name[j-1] != '/' { // Scan backward over element.
|
|
j--
|
|
}
|
|
|
|
if j > 1 {
|
|
// Create parent.
|
|
err = fs.mkdirAll(name[:j-1], mode)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
// Parent now exists; invoke Mkdir and use its result.
|
|
err = fs.Mkdir(name, mode)
|
|
if err != nil {
|
|
// Handle arguments like "foo/." by
|
|
// double-checking that directory doesn't exist.
|
|
dir, err1 := fs.Lstat(name)
|
|
if err1 == nil && dir.IsDir() {
|
|
return nil
|
|
}
|
|
return err
|
|
}
|
|
return nil
|
|
}
|