Comment 17 for bug 885167

Revision history for this message
Thierry Carrez (ttx) wrote :

markmc: Your patch is better -- though for security patches the idea is to simplify the fix as much as you can (here you don't just weed out malicious filenames, you also change filenames for non-malicious files, which I suppose is OK, but maybe not).