]> git-server-git.apps.pok.os.sepia.ceph.com Git - xfsprogs-dev.git/commit
xfs_scrub: warn about unicode variation selectors in names
authorDarrick J. Wong <djwong@kernel.org>
Mon, 13 Apr 2026 14:57:00 +0000 (07:57 -0700)
committerAndrey Albershteyn <aalbersh@kernel.org>
Fri, 17 Apr 2026 10:19:11 +0000 (12:19 +0200)
commit95329f9fa13040962c5a2a5e91a29ba215eb341f
tree3ac179a2178465ba0e76b8715e2f826d7b51c698
parenta8eb7b32137141dc33753d26662031939236364a
xfs_scrub: warn about unicode variation selectors in names

ArsTechnica recently wrote about a GitHub supply chain attack wherein
non-rendering unicode sequences were embedded in javascript files to
hide payloads that could be decrypted trivially later.  While these are
unlikely to appear in file and attribute names, we should warn about
this sort of steganography.

Link: https://arstechnica.com/security/2026/03/supply-chain-attack-using-invisible-code-hits-github-and-other-repositories/
Signed-off-by: "Darrick J. Wong" <djwong@kernel.org>
Reviewed-by: Christoph Hellwig <hch@lst.de>
scrub/unicrash.c