e55b67489b
chore(deps): update codecov/codecov-action action to v7
2026-06-07 10:29:47 +02:00
48d030dfb2
ln: accept non-utf8 source names in target-dir modes ( #11403 )
...
* ln: accept non-utf8 source names in target-dir modes
* ln: remove unused ln-error-cannot-stat locale strings
2026-06-06 19:40:42 +02:00
fab0cbd327
split: use map_err instead of match ( #12664 )
2026-06-06 18:56:10 +02:00
d8157f0e30
split: remove commented out code ( #12666 )
2026-06-06 18:55:30 +02:00
c6c69cf978
split.rs: dedup io::copy
2026-06-06 17:07:38 +02:00
78cc6399c9
split: read ahead input
2026-06-06 16:12:57 +02:00
0024b1a963
kill: use safe rustix Signal constructor, fix spell-checker comment ( #12636 )
2026-06-06 11:58:54 +02:00
0971d20f81
date: document the format-width cap and cover its boundary ( #12658 )
2026-06-06 10:00:43 +02:00
b15dba29c4
date: reject excessive format widths ( #12497 )
...
* date: reject excessive format widths
* date: relax huge width diagnostic test
* date: cap format modifier widths
---------
Co-authored-by: Deepak kudi <deepakkudi23@Deepaks-MacBook-Air.local >
Co-authored-by: Deepak kudi <deepakkudi23@adsl-172-10-9-116.dsl.sndg02.sbcglobal.net >
Co-authored-by: Puneet Dixit <puneetdixit200@users.noreply.github.com >
2026-06-06 08:49:11 +02:00
7f791b9cd7
Fix some new clippy warnings ( #12645 )
2026-06-06 07:52:15 +02:00
7cfc74e47f
chcon: anchor recursive relabel resolution to traversal dirfd ( #12566 )
...
---------
Co-authored-by: can1357 <me@can.ac >
2026-06-05 22:58:32 +02:00
58040feb5c
split: harden output open path against TOCTOU target swaps ( #12565 )
...
Co-authored-by: can1357 <me@can.ac >
2026-06-05 18:09:05 +02:00
6b22fda6b9
ci: run check-toctou.sh in a dedicated TOCTOU job
2026-06-05 17:58:26 +02:00
3222b4aa52
util: move touch/head TOCTOU checks into check-toctou.sh
2026-06-05 17:58:26 +02:00
c004672c5e
mkfifo: drop path-based chmod to close TOCTOU race; switch to rustix ( #10020 ) ( #12174 )
...
(except on mac)
2026-06-05 15:52:53 +02:00
7d27b3baa1
head: add TOCTOU regression tests and fix comment typo ( #12637 )
...
Follow-up to the metadata TOCTOU fix (#11972 , PR #12439 ):
- Add a syscall-level regression guard in util/check-safe-traversal.sh:
under strace, head must read metadata from the open descriptor
(fstat/statx on the fd) and must not stat the path before opening it.
Verified this fails on the pre-fix code and passes after.
- Add an integration test asserting that an unreadable file produces an
error but no "==> name <==" header, matching GNU (the header is only
printed after a successful open).
- Fix a stray paren in the Windows-branch comment.
2026-06-05 15:21:40 +02:00
43536897e4
head: Fixed TOCTOU bug in checking of metadata ( #12439 )
...
* head: Fixed TOCTOU bug in checking of metadata
* Fixed missing import and qualification for windows
2026-06-05 13:18:15 +02:00
533edad992
kill: replace nix::sys::signal with rustix::process ( #12326 )
2026-06-05 13:09:15 +02:00
abcdcdca53
pr: reject a non-positive expand-tab width (-e0)
...
`pr -e0` on input containing a tab aborted with a remainder-by-zero panic
(`chunk.len() % expand_options.width` in `apply_expand_tab`). The
`-e[char][width]` parser accepted a width of `0` — and a negative width via
e.g. `-eX-5` — without validation, so the zero/negative reached the chunk
arithmetic.
Reject `width <= 0` while parsing `-e`, emitting the same invalid-argument
error GNU produces (`pr: '-e' extra characters or invalid number in the
argument: '0'`, exit 1) instead of crashing.
2026-06-05 11:19:08 +02:00
e63cc0c260
openbsd.yml: get additional free disk space ( #12627 )
2026-06-05 10:19:17 +02:00
6d015356dd
pwd: ignore non-option arguments, drop getcwd disabling from pwd-long test
2026-06-05 09:44:04 +02:00
785860e1c5
chore(deps): update rust crate libfuzzer-sys to v0.4.13
2026-06-05 07:21:26 +02:00
0ff88b5711
dd: support nocache on android, freebsd ( #12602 )
2026-06-04 21:32:31 +02:00
bd9f32f7ae
numfmt: prevent panic if float precision specifier > 65535 ( #12600 )
2026-06-04 17:03:36 +02:00
d296f8d39f
Merge pull request #12171 from sylvestre/toctou-touch
...
touch: drop O_TRUNC on create to close TOCTOU race (#10019 )
2026-06-04 17:02:57 +02:00
renovate[bot]
Can Bölük
Daniel Hofstetter
oech3
Sylvestre Ledru
Puneet Dixit
Zhang Wen
Max Ambaum
mattsu
weili
Devel