RootCauseunvalidated
opens the FINAL file component with a plain openat() call that lacks O_NOFOLLOW — src/safe.c. Tension: it traverses directory components safely using openat() with O_DIRECTORY|O_NOFOLLOW, but opens the FINAL file component with a plain openat() call.
1910a964-b08e-47b2-a5d3-0bd03e0d39a3
opens the FINAL file component with a plain openat() call that lacks O_NOFOLLOW — src/safe.c. Tension: it traverses directory components safely using openat() with O_DIRECTORY|O_NOFOLLOW, but opens the FINAL file component with a plain openat() call.