mathiasandClaude Opus 5.5 febab3e45d fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169) (#170) ...

brain_tunnel accepts only clean wiki/.../*.md paths and reads/rewrites both notes through brainfs; new brainfs.WriteRegular never creates, never writes through a final symlink (Lstat + O_NOFOLLOW|O_NONBLOCK + os.SameFile on the handle, since os.Root follows in-root final symlinks even with O_NOFOLLOW). brain_update resolves like brain_edit (knowledge/ and wiki/ notes only) and reads/rewrites through brainfs. session_log requires a plain-name session id and opens with O_NOFOLLOW|O_NONBLOCK.

Fixes #169. Adversarial review: BLOCKED, BLOCKED, PASS (round 3 by the estate session's reviewer). Follow-ups: #173, #174.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Mathias <mthbqv@gmail.com>

2026-10-05 18:47:07 +00:00

..

brainfstest

test(brainfstest): swap-race asserts fail when nothing was tested

2026-10-05 09:32:25 +02:00

brainfs_test.go

fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169) (#170)

2026-10-05 18:47:07 +00:00

brainfs.go

fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169) (#170)

2026-10-05 18:47:07 +00:00