Ramon Roche 419c5535a8 fix(mavlink): scope FTP symlink hardening to POSIX/SITL only ...

NuttX is not affected by GHSA-93v7-287q-qx4g: it has a flat VFS, the
FAT driver used for /fs/microsd does not support symlinks, and
CONFIG_PSEUDOFS_SOFTLINKS is off by default. Running realpath() and
parent canonicalization there is dead weight that costs flash for no
security benefit.

Move the canonicalize_path helper, the in-root check, the new
includes, and O_NOFOLLOW behind #ifndef __PX4_NUTTX so the NuttX
build is functionally identical to main, except that _workOpen and
_workWrite now also call _validatePathIsWritable for write paths
(matching the pattern already used by the other writable opcodes).
On POSIX/SITL the symlink-resolution hardening is unchanged.

Drop the now-unused _validatePathIsInRoot declaration from the
header.

Signed-off-by: Ramon Roche <mrpollo@gmail.com>

2026-04-07 18:44:28 -07:00

..

drivers

fix(uavcan): use node-published timestamps for CAN sensor bridges (#26945)

2026-04-03 13:08:24 -08:00

examples

Docs beginner tutorials update (#26639)

2026-03-05 20:18:57 +11:00

include

uorb: compress format definitions

2023-11-08 00:31:26 -05:00

lib

feat(battery): enable use of BAT_n_I_OVERWRITE for all battery estimation sources

2026-04-03 20:57:05 -06:00

modules

fix(mavlink): scope FTP symlink hardening to POSIX/SITL only

2026-04-07 18:44:28 -07:00

systemcmds

Fix mtd command for very small partition sizes of just 32B

2026-04-07 13:42:12 +02:00

templates

fix: template_module update to best practise

2026-04-03 21:14:55 -06:00