actions/cache-apt-pkgs-action
1
0
Fork 0
mirror of https://github.com/awalsh128/cache-apt-pkgs-action.git synced 2026-06-16 12:14:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add symlink-depth guard and warning for chain traversal

Browse source
This commit is contained in:
copilot-swe-agent[bot] 2026-06-13 23:55:15 +00:00 committed by GitHub
parent 3519ec1fc5
commit a1ee266a7c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
install_and_cache_pkgs.sh
View file

@ -106,13 +106,11 @@ for installed_package in ${installed_packages}; do
get_tar_relpath "${f}"
if [ -L "${f}" ]; then
symlink_path="${f}"
# Guard against circular links; 40 is intentionally high for alternatives chains.
# Alternatives chains are typically short; keep a high ceiling to avoid loops.
max_symlink_depth=40
for i in $(seq 1 ${max_symlink_depth}); do
if [ ! -L "${symlink_path}" ]; then
break
fi
symlink_depth=0
while [ -L "${symlink_path}" ] && [ ${symlink_depth} -lt ${max_symlink_depth} ]; do
symlink_depth=$((symlink_depth + 1))
target="$(readlink "${symlink_path}")"
case "${target}" in
/*)
@ -135,6 +133,10 @@ for installed_package in ${installed_packages}; do
break
fi
done
if [ -L "${symlink_path}" ] && [ ${symlink_depth} -ge ${max_symlink_depth} ]; then
log " warning: max symlink depth ${max_symlink_depth} reached for ${f}."
fi
fi
fi
done