🐛 fix(soft): refuse to follow symlinks when reading the lock file - #548

Merged

gaborbernat merged 5 commits into

tox-dev:mainfrom

dxbjavid:soft-lock-nofollow-read

Jun 3, 2026

Commits on Jun 3, 2026

fix(soft): refuse to follow symlinks when reading the lock file
dxbjavid
committed
8088979
fix(soft): keep oversized lock files self-healing
gaborbernat
committed
215c696
fix(soft): stop attacker-placed FIFO from stalling lock read
gaborbernat
committed
4e841a3
test(soft): use getattr for unix-only os.mkfifo
gaborbernat
committed
a013813
test(soft): skip FIFO test in-body so ty narrows the platform
gaborbernat
committed
49eaaf4