| 76 | } |
| 77 | |
| 78 | func localPath(baseDir, filename string) (string, error) { |
| 79 | absBaseDir, err := filepath.Abs(baseDir) |
| 80 | if err != nil { |
| 81 | return "", fmt.Errorf("error resolving base directory %q: %w", baseDir, err) |
| 82 | } |
| 83 | |
| 84 | absFilename, err := filepath.Abs(filepath.Join(absBaseDir, filepath.Clean(filename))) |
| 85 | if err != nil { |
| 86 | return "", fmt.Errorf("error resolving path %q: %w", filename, err) |
| 87 | } |
| 88 | |
| 89 | rel, err := filepath.Rel(absBaseDir, absFilename) |
| 90 | if err != nil { |
| 91 | return "", fmt.Errorf("error checking path %q: %w", filename, err) |
| 92 | } |
| 93 | if rel == ".." || strings.HasPrefix(rel, ".."+string(filepath.Separator)) { |
| 94 | return "", fmt.Errorf("path escapes base directory %q: %q", absBaseDir, filename) |
| 95 | } |
| 96 | |
| 97 | return absFilename, nil |
| 98 | } |
| 99 | |
| 100 | func parseAndUpdateGoModFile(checkOnly bool, modFilename, workFilename, workGoVersion, workToolchainName string) (bool, error) { |
| 101 | modFileData, err := os.ReadFile(modFilename) |