mirror of
https://github.com/uutils/coreutils.git
synced 2026-06-10 15:48:22 -07:00
7d27b3baa1
Follow-up to the metadata TOCTOU fix (#11972, PR #12439): - Add a syscall-level regression guard in util/check-safe-traversal.sh: under strace, head must read metadata from the open descriptor (fstat/statx on the fd) and must not stat the path before opening it. Verified this fails on the pre-fix code and passes after. - Add an integration test asserting that an unreadable file produces an error but no "==> name <==" header, matching GNU (the header is only printed after a successful open). - Fix a stray paren in the Windows-branch comment.