Subject: Bug#773762: apt-listdifferences: diff goes outside package tree

From: Michael Gilbert <[email-masked]>
Date: Tue, 12 Jul 2016 21:44:32 -0400

control: severity -1 wishlist
control: reassign -1 devscripts
control: affects -1 apt-listdifferences
control: retitle -1 [debdiff] option to avoid dereferencing symlinks

On Mon, Dec 22, 2014 at 7:03 PM, Achim Schaefer wrote:
> when running apt-listdifferences, it happens sometimes, diff is comparing data outside the tmp source dir.
> E.g. this now happens with docker.io:
> diff: /tmp/BsDox6gACB/docker.io-1.3.2~dfsg1/pkg/symlink/testdata/fs/a/d: Datei oder Verzeichnis nicht gefunden
> diff: /tmp/BsDox6gACB/docker.io-1.3.2~dfsg1/pkg/symlink/testdata/fs/a/e/h/.kde/socket-data: Datei oder Verzeichnis nicht gefunden
> This is basically in my home dir.
> Here one of the examples, what we see in the original source:
> root@data:/tmp/BsDox6gACB/docker.io-1.3.2~dfsg1/pkg/symlink/testdata/fs# ls -l
> insgesamt 0
> drwxr-xr-x 2 root root 100 Nov 24 18:38 a
> drwxr-xr-x 2 root root  60 Nov 24 18:38 b
> lrwxrwxrwx 1 root root  40 Nov 24 18:38 g -> ../../../../../../../../../../../../root
> lrwxrwxrwx 1 root root   1 Nov 24 18:38 i -> a
> drwxr-xr-x 2 root root  60 Nov 24 18:38 j

debdiff would need to provide an option that passes --no-dereference to diff.

Best wishes,
Mike