fix: use lstat instead of stat in receive_thread (symlink security)

2026-07-30 18:10:29 +02:00
parent 8cc587b79e
commit 05dab758cf
1 changed files with 1 additions and 1 deletions
@@ -148,7 +148,7 @@ int receive_thread(void* pipeline_context) {
        }
        char* full_path = path_cat(config->receive_root_directory, check_path);
        struct stat st;
-        bool has_old = full_path && stat(full_path, &st) == 0;
+        bool has_old = full_path && lstat(full_path, &st) == 0;
        bool match = has_old && (unsigned long long)st.st_size == check_size &&
                     (long long)st.st_mtime == check_mtime;
        if (match)