toRealPath() is required for untarring Isabelle
26d723e0 broke this, but I have no idea how it ever worked *after* that change (it probably didn't). The problem is that untarring checks for "malicious" tarfiles and in the process, normalizes entry paths. If the outer path is not normalized, the subpath check fails.
Please register or sign in to comment