Diff

Differences From Artifact [98d9d73f56]:

To Artifact [b01c545d08]:


   434    434   				switch -- $fileInfo(type) {
   435    435   					"#manifestmetadata" {
   436    436   						unset -nocomplain fileInfo
   437    437   						continue
   438    438   					}
   439    439   					"file" {
   440    440   						set fileInfo(size) [lindex $work 0]
   441         -						set fileInfo(perms) [lindex $work 1]
          441  +
          442  +						# We lower-case the permissions because upper-case permissions
          443  +						# should not be set remotely as they may influence the security
          444  +						# of the system.
          445  +						set fileInfo(perms) [string tolower [lindex $work 1]]
          446  +
   442    447   						set fileInfo(sha1) [lindex $work 2]
   443    448   
   444    449   						set work [lrange $work 3 end]
   445    450   					}
   446    451   					"symlink" {
   447    452   						set fileInfo(source) [lindex $work 0]
   448    453   						set work [lrange $work 1 end]