jfro/fuzzy_catalog
Watch
1
0
Fork
You've already forked fuzzy_catalog
 0
Code Issues 14 Pull requests Projects Releases 2 Packages 1 Wiki Activity Actions

Calibre cover path check only lstats the final path component #28

New issue
Open
opened 2026-10-18 16:23:37 +00:00 by jfro · 0 comments
jfro commented 2026-10-18 16:23:37 +00:00
Owner
Copy link

Non-blocking follow-up from Nye's approval of #18 (fixes #5).

store_synced_cover checks lstat on the final path component only, so a symlinked directory inside the Calibre library could still point outside it.

Fix: resolve the real path (walk components with :file.read_link_info, or compare against the realpath of the library root). The library is admin-controlled, so low.

Non-blocking follow-up from Nye's approval of #18 (fixes #5). `store_synced_cover` checks `lstat` on the final path component only, so a symlinked *directory* inside the Calibre library could still point outside it. **Fix:** resolve the real path (walk components with `:file.read_link_info`, or compare against the realpath of the library root). The library is admin-controlled, so low.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
jtk/git-cliff-release
v0.6.1
v0.6.0
v0.5.1
v0.5.0
v0.4.0
v0.3.1
v0.3.0
v0.2.0
v0.1.0
Labels
Clear labels   
bug

   
critical

   
ebook-branch

   
high

   
low

   
main

   
medium

   
release-blocker

   
security
No labels
bug
critical
ebook-branch
high
low
main
medium
release-blocker
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfro/fuzzy_catalog#28
No description provided.