1 files changed, 9 insertions, 0 deletions
diff --git a/safepath.c b/safepath.c
index b66db65..a57ed6a 100644
--- a/safepath.c
+++ b/safepath.c
@@ -377,6 +377,15 @@ int safepath_check(const char *name)
         goto free_out;
       }
 
+      /* A symlink with a link count > 1 is suspicious; it looks like a
+       * hard link attack: an attacker hard linking a symlink into a
+       * /tmp-like directory.
+       */
+      if (st.st_nlink > 1) {
+        ret = SAFEPATH_UNSAFE;
+        goto free_out;
+      }
+
       if ((len = readlink(copy, link, sizeof link)) < 0) {
         ret = safepath_err(errno);
         goto free_out;