Files
AnyPS5/core/libs/prx/libkernel_sys
valenciana-nc 7408e55478 fix(libkernel_sys): reject parent-directory components in symlink targets
symlink_nid_postfix blocked absolute targets but accepted relative
targets containing '..' unchecked. The target is stored verbatim and the
host OS follows it when the link is later opened through the guest path
resolver, so symlink("../../../../..", "e") followed by
sceKernelOpen("e/etc/passwd", ...) reads host files outside the guest
root. Reject any '..' component, mirroring the absolute-target handling
above it.
2026-10-18 21:09:38 +00:00
..