mathiasandClaude Opus 5.5 ddd4bdc2ac fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187) ...

ReadRegular, ReadRegularMax and WriteRegular require a clean, local path and a real directory at every level above the file, so an in-brain directory symlink (or a ".." after one) can no longer redirect brain_update, brain_tunnel, brain_read/get or the other readers elsewhere in the brain. session.Append opens through an os.Root on the brain dir, refuses a non-directory sessions dir, and writes only after confirming the log path is the regular file it opened.

Fixes #173. Adversarial review: BLOCKED, PASS. Follow-up: #188 (brain_write create path).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Mathias <mthbqv@gmail.com>

2026-10-05 20:17:37 +00:00

..

brainfstest

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

brainfs_test.go

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

brainfs.go

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00