CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/12 23:29:54
Modified files:
usr.sbin/fw_update: fw_update.sh
Log message:
fw_update: Make tar skip files outside expected locations
tar(1) strips ".." path components, but this happens after globbing is
applied to the file parameter. This meant tar's -s replacements and the
file parameter examined different strings, meaning a specially
constructed archive could write outside the expected locations. Use
tar's documented order of -s expressions to skip everything else.
