Backport a tmpdir fix.

nagachika · nagachika · commit 59cfa0b13460 · 2021-04-05T20:48:25.000+09:00
Remove other then alphanumeric and some punctuations considered
filesystem-safe, instead of removing some unsafe chars only.
diff --git a/lib/tmpdir.rb b/lib/tmpdir.rb
@@ -108,7 +108,7 @@ def tmpdir
       Dir.tmpdir
     end
 
-    UNUSABLE_CHARS = [File::SEPARATOR, File::ALT_SEPARATOR, File::PATH_SEPARATOR, ":"].uniq.join("").freeze
+    UNUSABLE_CHARS = "^,-.0-9A-Z_a-z~"
 
     def create(basename, tmpdir=nil, max_try: nil, **opts)
       origdir = tmpdir
diff --git a/test/test_tmpdir.rb b/test/test_tmpdir.rb
@@ -86,6 +86,10 @@ def assert_mktmpdir_traversal
       traversal_path = Array.new(target.count('/')-2, '..').join('/') + traversal_path
       actual = yield traversal_path
       assert_not_send([File.absolute_path(actual), :start_with?, target])
+      [File::SEPARATOR, File::ALT_SEPARATOR].compact.each do |separator|
+        actual = yield traversal_path.tr('/', separator)
+        assert_not_send([File.absolute_path(actual), :start_with?, target])
+      end
     end
   end
 end
diff --git a/version.h b/version.h
@@ -2,7 +2,7 @@
 # define RUBY_VERSION_MINOR RUBY_API_VERSION_MINOR
 #define RUBY_VERSION_TEENY 3
 #define RUBY_RELEASE_DATE RUBY_RELEASE_YEAR_STR"-"RUBY_RELEASE_MONTH_STR"-"RUBY_RELEASE_DAY_STR
-#define RUBY_PATCHLEVEL 181
+#define RUBY_PATCHLEVEL 182
 
 #define RUBY_RELEASE_YEAR 2021
 #define RUBY_RELEASE_MONTH 4
