Stefan Sperling wrote on Thu, Mar 01, 2012 at 17:27:52 +0100:
> On Thu, Mar 01, 2012 at 04:35:32PM +0100, Humm, Markus wrote:
> > In File
> >  
> > »D:\Development\SVN\Releases\TortoiseSVN-1.7.5\ext\subversion\subversion\libsvn_wc\wc_db.c«,
> >  Zeile 2890: Assert-Anweisung schlug fehl
> >  (svn_dirent_is_ancestor(wcroot->abspath, local_abspath))
> > 
> > The local path of my svn:externals was this: 
> > D:/u/svnexternaltest2/gemeinsamme_bibliotheken
> >
> > If I tried to use ../svnexternaltest2/gemeinsamme_bibliotheken instead 
> > Tortoise would detect that it contains a .. Or is a absolute path. 
> > Obviously either Tortoises or SVN's absolute path detection loginc is not 
> > 100% fool proof as well.
> 
> Yes, this is a bug. Coincidentally this problem was discussed just today.
> See http://svn.haxx.se/users/archive-2012-03/0012.shtml

The assert is a bug, but the error is not.  The code does not permit
either absolute paths or paths containing ".." elements for security
reasons.  (to not allow a malicious server to create files in arbitrary
places in the filesystem --- i.e., not under the wc root)

Reply via email to