Skip to content

Conversation

@bjorn3
Copy link
Collaborator

@bjorn3 bjorn3 commented Dec 9, 2025

Fixes #1353

@squell squell added this to the i18n milestone Dec 9, 2025
@squell squell added the chore Improvements that don't alter behaviour. label Dec 9, 2025
"/usr/lib/zoneinfo",
]
.into_iter()
.find(|p| Path::new(p).exists())
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: a temptation here would be to add a "audit.rs"-like check that the path should not be user-writable. But of course in this scenario that actually weakens the security. I'd suggest adding a comment here that adding a "writeability" check here is deliberately ommitted.

@squell squell modified the milestones: i18n, Extra Security Dec 10, 2025
@squell squell added the C-operatingsystem Low-level glue layers label Dec 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C-operatingsystem Low-level glue layers chore Improvements that don't alter behaviour.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Maybe detect zoneinfo location at runtime?

2 participants