file_util.rs:159–201: reference-directory discovery recurses into subdirectories, and is_dir() follows symlinks,
so a symlink pointing at an ancestor inside a -R <dir> tree causes infinite recursion → stack overflow
(also deep real trees).
Different threat model (a malicious directory, not a .slice file — e.g., an untrusted package with reference slices). Consider a visited-set over canonicalized paths plus a depth cap.
file_util.rs:159–201: reference-directory discovery recurses into subdirectories, andis_dir()follows symlinks,so a symlink pointing at an ancestor inside a
-R <dir>tree causes infinite recursion → stack overflow(also deep real trees).
Different threat model (a malicious directory, not a .slice file — e.g., an untrusted package with reference slices). Consider a visited-set over canonicalized paths plus a depth cap.