My minimal, memory-safe Go rsync steers clear of vulnerabilities

Posted by Brajeshwar on Monday May 25, 2026 @10:20AM
from the michael.stapelberg.ch dept.

( 3 comments | 3 points | on HN )

Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by 3eb7988a1663 on Monday May 25, 2026 @11:53AM (#48268291)

Is there a solid reference resource on handling symlinks? It seems a never ending source of security bugs.

[ Parent | on HN ]

Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by d0vs on Monday May 25, 2026 @12:55PM (#48268976)

Agreed. Not a direct answer but this should be interesting: https://github.com/cyphar/filepath-securejoin

[ Parent | on HN ]

Re:My minimal, memory-safe Go rsync steers clear of vulnerab... by euroderf on Monday May 25, 2026 @12:55PM (#48268991)

The new os.Root is supposed to handle symlinks correctly in a sandbox, but (of course?) the first release had a bug related to symlinks.

[ Parent | on HN ]